Tech Problem Aggregator

Annoying Virus with commercials / sounds running in the background

Q: Annoying Virus with commercials / sounds running in the background

I would like to say much thanks in advance for taking a look.

What can I say about this virus/trojan/whatever. Well, it removed my antivirus so I can't scan and therefore have no clue of the name. When I went to click on windows defender within the control panel, it bluescreens. I am unable to run most virus removal programs. This thing is nasty and appears to be getting worse i.e. appears to be randomly blue screening now.

I am currently doing the RootRepeal scan but will go ahead and post this now for fear of another blue screen.
**UPDATE: added the ark.txt file

Below is the lovely dds:
DDS (Ver_09-12-01.01) - NTFSx86
Run by Fritz at 22:37:00.01 on Wed 12/16/2009
Internet Explorer: 8.0.6001.18865
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2046.821 [GMT -6:00]

AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
SP: AntiVir Desktop *enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}
SP: Lavasoft Ad-Watch Live! *enabled* (Updated) {67844DAE-4F77-4D69-9457-98E8CFFDAA22}
SP: Windows Defender *enabled* (Updated) {D68DDC3A-831F-4FAE-9E44-DA132C1ACF46}

============== Running Processes ===============

C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows\Microsoft.Net\Framework\v3.0\WPF\PresentationFontCache.exe
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k GPSvcGroup
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\rundll32.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Program Files\Protector Suite QL\upeksvr.exe
C:\Windows\system32\svchost.exe -k NetworkService
C:\Program Files\Lavasoft\Ad-Aware\AAWService.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Windows\system32\agrsmsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\system32\svchost.exe -k bthsvcs
C:\Program Files\TOSHIBA\ConfigFree\CFSvcs.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Common Files\Microsoft Shared\VS7DEBUG\MDM.EXE
C:\Toshiba\IVP\ISM\pinger.exe
C:\Windows\system32\svchost.exe -k NetworkServiceNetworkRestricted
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Windows\system32\svchost.exe -k imgsvc
c:\Toshiba\IVP\swupdate\swupdtmr.exe
C:\Windows\system32\Wacom_Tablet.exe
C:\Program Files\Toshiba\TOSHIBA HD DVD PLAYER\TNaviSrv.exe
C:\Windows\system32\TODDSrv.exe
C:\Program Files\Toshiba\Power Saver\TosCoSrv.exe
C:\Program Files\WebDrive\wdService.exe
C:\Windows\System32\svchost.exe -k WerSvcGroup
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\wbem\unsecapp.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\Dwm.exe
C:\Windows\system32\taskeng.exe
C:\Windows\SYSTEM32\WISPTIS.EXE
C:\Program Files\Common Files\microsoft shared\ink\TabTip.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\system32\WTablet\Wacom_TabletUser.exe
C:\Windows\system32\Wacom_Tablet.exe
C:\Program Files\Synaptics\SynTP\SynTPEnh.exe
C:\Program Files\Toshiba\ConfigFree\NDSTray.exe
C:\Program Files\Toshiba\Utilities\KeNotify.exe
C:\Program Files\Toshiba\SmoothView\SmoothView.exe
C:\Program Files\Toshiba\FlashCards\TCrdMain.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrotray.exe
C:\Program Files\Sprint\Sprint SmartView\RDVCHG.exe
C:\Program Files\Adobe\Acrobat 8.0\Acrobat\acrobat_sl.exe
C:\Program Files\Logitech\SetPoint\SetPoint.exe
C:\Program Files\Toshiba\ConfigFree\CFSwMgr.exe
C:\Program Files\Common Files\Logishrd\KHAL2\KHALMNPR.EXE
C:\Program Files\Common Files\Macrovision Shared\FLEXnet Publisher\FNPLicensingService.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWWSC.exe
C:\Program Files\Synaptics\SynTP\SynToshiba.exe
C:\Program Files\Lavasoft\Ad-Aware\AAWTray.exe
C:\Program Files\Synaptics\SynTP\SynTPHelper.exe
C:\Program Files\Mozilla Thunderbird\thunderbird.exe
C:\Program Files\Common Files\Microsoft Shared\Ink\InputPersonalization.exe
C:\Program Files\Mozilla Firefox\firefox.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Program Files\Internet Explorer\Iexplore.exe
C:\Windows\system32\SearchFilterHost.exe
C:\Windows\system32\SearchProtocolHost.exe
C:\Users\Fritz\Desktop\dds.scr
C:\Windows\system32\wbem\wmiprvse.exe

============== Pseudo HJT Report ===============

uStart Page = about:blank
mDefault_Page_URL = hxxp://www.toshibadirect.com/dpdstart
uInternet Settings,ProxyOverride = *.local
BHO: Adobe PDF Reader Link Helper: {06849e9f-c8d7-4d59-b87d-784b7d6be0b3} - c:\program files\common files\adobe\acrobat\activex\AcroIEHelper.dll
BHO: Adobe PDF Conversion Toolbar Helper: {ae7cd045-e861-484f-8273-0445ee161910} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
TB: Adobe PDF: {47833539-d0c5-4125-9fa8-0819e2eaac93} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
EB: Adobe PDF: {182ec0be-5110-49c8-a062-beb1d02a220b} - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll
uRun: [clspackxq.exe] c:\users\fritz\appdata\local\temp\clspackxq.exe
mRun: [SynTPStart] c:\program files\synaptics\syntp\SynTPStart.exe
mRun: [Windows Defender] %ProgramFiles%\Windows Defender\MSASCui.exe -hide
mRun: [NDSTray.exe] NDSTray.exe
mRun: [HWSetup] \HWSetup.exe hwSetUP
mRun: [SVPWUTIL] c:\program files\toshiba\utilities\SVPWUTIL.exe SVPwUTIL
mRun: [KeNotify] c:\program files\toshiba\utilities\KeNotify.exe
mRun: [TPwrMain] %ProgramFiles%\TOSHIBA\Power Saver\TPwrMain.EXE
mRun: [HSON] %ProgramFiles%\TOSHIBA\TBS\HSON.exe
mRun: [SmoothView] %ProgramFiles%\Toshiba\SmoothView\SmoothView.exe
mRun: [00TCrdMain] %ProgramFiles%\TOSHIBA\FlashCards\TCrdMain.exe
mRun: [avgnt] "c:\program files\avira\antivir desktop\avgnt.exe" /min
mRun: [Kernel and Hardware Abstraction Layer] KHALMNPR.EXE
mRun: [RtHDVCpl] RtHDVCpl.exe
mRun: [Acrobat Assistant 8.0] "c:\program files\adobe\acrobat 8.0\acrobat\Acrotray.exe"
mRun: [<NO NAME>]
mRun: [Adobe_ID0EYTHM] c:\progra~1\common~1\adobe\adobev~1\server\bin\VERSIO~2.EXE
mRun: [googletalk] c:\program files\google\google talk\googletalk.exe /autostart
mRun: [QuickTime Task] "c:\program files\quicktime\QTTask.exe" -atboottime
mRun: [Sprint SmartView] "c:\program files\sprint\sprint smartview\SprintSV.exe" -a
mRun: [RDVCHG] "c:\program files\sprint\sprint smartview\RDVCHG.exe"
mRun: [NvCplDaemon] RUNDLL32.EXE c:\windows\system32\NvCpl.dll,NvStartup
mRun: [NvMediaCenter] RUNDLL32.EXE c:\windows\system32\NvMcTray.dll,NvTaskbarInit
mRun: [SynTPEnh] c:\program files\synaptics\syntp\SynTPEnh.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobea~1.lnk - c:\windows\installer\{ac76ba86-1033-0000-7760-000000000003}\_SC_Acrobat.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\adobea~2.lnk - c:\program files\adobe\acrobat 8.0\acrobat\AdobeCollabSync.exe
StartupFolder: c:\progra~2\micros~1\windows\startm~1\programs\startup\logite~1.lnk - c:\program files\logitech\setpoint\SetPoint.exe
mPolicies-explorer: BindDirectlyToPropertySetStorage = 0 (0x0)
mPolicies-system: EnableLUA = 0 (0x0)
mPolicies-system: DisableCAD = 1 (0x1)
mPolicies-system: EnableUIADesktopToggle = 0 (0x0)
IE: Append to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert link target to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert link target to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert selected links to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECaptureSelLinks.html
IE: Convert selected links to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppendSelLinks.html
IE: Convert selection to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: Convert selection to existing PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIEAppend.html
IE: Convert to Adobe PDF - c:\program files\adobe\acrobat 8.0\acrobat\AcroIEFavClient.dll/AcroIECapture.html
IE: E&xport to Microsoft Excel - c:\progra~1\micros~3\office11\EXCEL.EXE/3000
IE: {92780B25-18CC-41C8-B9BE-3C9C571A8263} - {FF059E31-CC5A-4E2E-BF3B-96E929D65503} - c:\progra~1\micros~3\office11\REFIEBAR.DLL
DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} - hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
DPF: {E2883E8F-472F-4FB0-9522-AC9BF37916A7} - hxxp://platformdl.adobe.com/NOS/getPlusPlus/1.6/gp.cab
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - c:\progra~1\common~1\skype\SKYPE4~1.DLL
Notify: psfus - c:\windows\system32\psqlpwd.dll
LSA: Notification Packages = scecli psqlpwd

================= FIREFOX ===================

FF - ProfilePath - c:\users\fritz\appdata\roaming\mozilla\firefox\profiles\49h655qa.default\
FF - prefs.js: browser.startup.homepage - hxxp://www.google.com/
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nppl3260.dll
FF - plugin: c:\program files\k-lite codec pack\real\browser\plugins\nprpjplug.dll
FF - plugin: c:\program files\microsoft\web platform installer\NPWPIDetector.dll
FF - plugin: c:\program files\tabletplugins\npwacom.dll
FF - HiddenExtension: Microsoft .NET Framework Assistant: {20a82645-c095-46ed-80e3-08825760534b} - c:\windows\microsoft.net\framework\v3.5\windows presentation foundation\dotnetassistantextension\

---- FIREFOX POLICIES ----
c:\program files\mozilla firefox\greprefs\security-prefs.js - pref("security.ssl3.rsa_seed_sha", true);

============= SERVICES / DRIVERS ===============

R0 Lbd;Lbd;c:\windows\system32\drivers\Lbd.sys [2009-11-19 64288]
R1 avgio;avgio;c:\program files\avira\antivir desktop\avgio.sys [2009-11-19 11608]
R2 avgntflt;avgntflt;c:\windows\system32\drivers\avgntflt.sys [2009-11-19 56816]
R2 Lavasoft Ad-Aware Service;Lavasoft Ad-Aware Service;c:\program files\lavasoft\ad-aware\AAWService.exe [2009-9-24 1184912]
R2 TabletServiceWacom;TabletServiceWacom;c:\windows\system32\Wacom_Tablet.exe [2009-12-2 4463400]
R2 WebDriveFSD;WebDrive File System Driver;c:\program files\webdrive\wdfsd.sys [2008-1-17 178176]
S2 AntiVirSchedulerService;Avira AntiVir Scheduler;c:\program files\avira\antivir desktop\sched.exe [2009-11-19 108289]
S2 AntiVirService;Avira AntiVir Guard;c:\program files\avira\antivir desktop\avguard.exe [2009-11-19 185089]
S3 CASprint;Sprint Con App Svc;c:\program files\sprint\sprint smartview\ConAppsSvc.exe [2009-12-2 124224]
S3 FontCache;Windows Font Cache Service;c:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation [2009-11-21 21504]
S3 wacmoumonitor;Wacom Mode Helper;c:\windows\system32\drivers\wacmoumonitor.sys [2009-12-2 16168]

=============== Created Last 30 ================

2009-12-16 19:00:28 290270233 ----a-w- c:\windows\MEMORY.DMP
2009-12-16 18:45:33 0 d-----w- c:\users\fritz\DoctorWeb
2009-12-16 16:54:59 27839 ----a-w- c:\programdata\nvModes.dat
2009-12-16 16:51:05 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01007.Wdf
2009-12-16 16:50:20 0 d-----w- c:\windows\nvtmpinst
2009-12-16 16:45:30 499712 ----a-w- c:\windows\system32\kerberos.dll
2009-12-16 16:45:30 270848 ----a-w- c:\windows\system32\schannel.dll
2009-12-16 04:56:45 661 ----a-w- c:\windows\system32\krl32mainweq.dll
2009-12-16 04:55:43 121 ----a-w- c:\windows\system32\srcr.dat
2009-12-14 03:39:03 38 ----a-w- c:\windows\avisplitter.ini
2009-12-14 03:39:03 178176 ----a-w- c:\windows\system32\unrar.dll
2009-12-14 03:39:01 839680 ----a-w- c:\windows\system32\lameACM.acm
2009-12-14 03:39:01 414 ----a-w- c:\windows\system32\lame_acm.xml
2009-12-14 03:39:00 881664 ----a-w- c:\windows\system32\xvidcore.dll
2009-12-14 03:39:00 217088 ----a-w- c:\windows\system32\yv12vfw.dll
2009-12-14 03:39:00 205824 ----a-w- c:\windows\system32\xvidvfw.dll
2009-12-14 03:39:00 118784 ----a-w- c:\windows\system32\ac3acm.acm
2009-12-14 03:38:59 90112 ----a-w- c:\windows\system32\dpl100.dll
2009-12-14 03:38:59 3596288 ----a-w- c:\windows\system32\qt-dx331.dll
2009-12-14 03:38:58 685056 ----a-w- c:\windows\system32\divx.dll
2009-12-14 03:38:57 85504 ----a-w- c:\windows\system32\ff_vfw.dll
2009-12-14 03:38:57 547 ----a-w- c:\windows\system32\ff_vfw.dll.manifest
2009-12-14 03:38:55 0 d-----w- c:\program files\K-Lite Codec Pack
2009-12-13 01:45:00 0 d-----w- c:\program files\Sierra Wireless
2009-12-13 01:44:54 0 d-----w- c:\program files\common files\PctelEapPeer Authentication
2009-12-13 01:44:52 0 d-----w- c:\program files\Novatel Wireless
2009-12-13 01:44:27 0 d-----w- c:\programdata\Sprint
2009-12-10 05:37:57 24064 ----a-w- c:\windows\system32\nshhttp.dll
2009-12-10 05:37:56 411648 ----a-w- c:\windows\system32\drivers\http.sys
2009-12-10 05:37:56 30720 ----a-w- c:\windows\system32\httpapi.dll
2009-12-06 15:40:27 0 d-----w- c:\program files\MediaMonkey
2009-12-06 14:01:15 0 d-----w- c:\windows\system32\Adobe
2009-12-05 13:11:33 0 ----a-w- c:\windows\system32\Wacom_Tablet.dat
2009-12-03 03:49:52 0 d-----w- c:\programdata\AppData
2009-12-03 03:49:19 0 d-----w- c:\users\fritz\appdata\roaming\WTablet
2009-12-03 03:48:38 0 d-----w- c:\program files\TabletPlugins
2009-12-03 03:48:36 1653980 ----a-w- c:\windows\system32\WacomTablet.znc
2009-12-03 03:48:35 7892776 ----a-w- c:\windows\system32\WacomTablet.cpl
2009-12-03 03:47:23 11312 ----a-w- c:\windows\system32\drivers\wacommousefilter.sys
2009-12-03 03:46:26 13736 ----a-w- c:\windows\system32\drivers\wacomvhid.sys
2009-12-03 03:45:25 16168 ----a-w- c:\windows\system32\drivers\wacmoumonitor.sys
2009-12-03 03:45:25 0 d-----w- c:\windows\system32\WTablet
2009-12-03 03:45:22 4463400 ----a-w- c:\windows\system32\Wacom_Tablet.exe
2009-12-03 03:45:22 412456 ----a-w- c:\windows\system32\Wacom_Tablet.dll
2009-12-03 03:45:22 285184 ----a-w- c:\windows\system32\Wintab32.dll
2009-12-03 03:45:19 0 d-----w- c:\program files\Tablet
2009-12-02 23:00:14 0 d-----w- c:\users\fritz\appdata\roaming\Sprint
2009-12-02 22:32:19 0 d-----w- c:\users\fritz\appdata\roaming\Bytemobile
2009-12-02 22:31:07 27072 ----a-w- c:\windows\system32\drivers\PCASp50.sys
2009-12-02 22:24:22 0 d-----w- c:\program files\Sprint
2009-12-02 22:20:48 0 d-----w- c:\users\fritz\appdata\roaming\Sierra Wireless
2009-12-02 22:20:48 0 d-----w- c:\program files\Sierra Wireless Inc
2009-12-02 22:20:44 0 ---ha-w- c:\windows\system32\drivers\Msft_User_WpdFs_01_07_00.Wdf
2009-12-02 18:21:30 66880 ----a-w- c:\windows\system32\pxfhwmcp.dll
2009-12-02 18:21:20 136512 ----a-w- c:\windows\system32\PCTIN50.dll
2009-12-02 18:12:40 222720 ----a-w- c:\windows\system32\drivers\NWADIenum.sys
2009-12-02 18:12:34 38680 ----a-w- c:\windows\system32\drivers\pctnullport.sys
2009-12-02 18:10:58 7299 ----a-w- c:\windows\system32\PCTINDIS.cat
2009-12-02 18:10:58 32408 ----a-w- c:\windows\system32\PCTINDIS5.sys
2009-11-27 15:46:51 0 d-----w- c:\programdata\Apple Computer
2009-11-27 15:45:08 0 d-----w- c:\programdata\Apple
2009-11-26 18:00:38 56 ---ha-w- c:\windows\system32\ezsidmv.dat
2009-11-26 17:57:06 0 d-----r- c:\program files\Skype
2009-11-26 17:57:01 0 d-----w- c:\programdata\Skype
2009-11-26 00:04:26 376 ----a-w- c:\windows\ODBC.INI
2009-11-26 00:04:22 17920 ----a-w- c:\windows\system32\mdimon.dll
2009-11-26 00:01:40 0 d-----w- c:\program files\common files\L&H
2009-11-26 00:00:34 0 d-----w- c:\program files\Microsoft ActiveSync
2009-11-25 23:58:03 0 d-----w- c:\windows\PCHEALTH
2009-11-25 23:49:29 0 d-----w- c:\program files\Windows Portable Devices
2009-11-25 22:34:15 2048 ----a-w- c:\windows\system32\tzres.dll
2009-11-25 22:32:53 81920 ----a-w- c:\windows\system32\wpdbusenum.dll
2009-11-25 20:40:23 1401856 ----a-w- c:\windows\system32\msxml6.dll
2009-11-25 20:40:22 1248768 ----a-w- c:\windows\system32\msxml3.dll
2009-11-25 20:40:16 714240 ----a-w- c:\windows\system32\timedate.cpl
2009-11-25 07:57:59 0 d-----w- c:\windows\system32\eu-ES
2009-11-25 07:57:59 0 d-----w- c:\windows\system32\ca-ES
2009-11-25 07:57:56 0 d-----w- c:\windows\system32\vi-VN
2009-11-25 02:45:09 0 d-----w- c:\windows\system32\EventProviders
2009-11-24 15:59:20 971776 ----a-w- c:\windows\system32\SSCProt.dll
2009-11-24 15:59:20 69632 ----a-w- c:\windows\system32\rfwdui.dll
2009-11-24 15:59:20 249916 ----a-w- c:\windows\system32\rfwdres.dll
2009-11-24 15:59:19 917504 ----a-w- c:\windows\system32\wdcl32.dll
2009-11-24 15:59:19 634880 ----a-w- c:\windows\system32\rfshext.dll
2009-11-24 15:59:19 544768 ----a-w- c:\windows\system32\wdSftp.dll
2009-11-24 15:59:19 53248 ----a-w- c:\windows\system32\rfshres.dll
2009-11-24 15:59:19 36864 ----a-w- c:\windows\system32\rfhres.dll
2009-11-24 15:59:19 245760 ----a-w- c:\windows\system32\RFNP32.dll
2009-11-24 15:59:19 24576 ----a-w- c:\windows\system32\rfstrres.dll
2009-11-24 15:59:19 1810432 ----a-w- c:\windows\system32\RFHelper.dll
2009-11-24 15:46:51 103720 ----a-w- c:\users\fritz\GoToAssistDownloadHelper.exe
2009-11-24 07:51:03 18904 ----a-w- c:\windows\system32\StructuredQuerySchemaTrivial.bin
2009-11-24 07:50:59 11967524 ----a-w- c:\windows\system32\korwbrkr.lex
2009-11-23 18:31:59 968192 ----a-w- c:\windows\system32\wcnwiz2.dll
2009-11-23 18:30:59 449024 ----a-w- c:\windows\system32\termsrv.dll
2009-11-23 18:29:59 705536 ----a-w- c:\windows\system32\SmiEngine.dll
2009-11-23 18:29:57 218624 ----a-w- c:\windows\system32\wdscore.dll
2009-11-23 18:29:57 130560 ----a-w- c:\windows\system32\PkgMgr.exe
2009-11-23 18:29:53 247808 ----a-w- c:\windows\system32\drvstore.dll
2009-11-23 07:33:27 0 d-----w- C:\PerfLogs
2009-11-22 18:47:41 0 d-----w- c:\program files\Microsoft
2009-11-22 18:40:22 0 d-----w- c:\program files\Microsoft SQL Server
2009-11-22 18:32:06 0 d-----w- c:\program files\Microsoft Web Designer Tools
2009-11-22 02:20:55 57667 ----a-w- c:\windows\system32\ieuinit.inf
2009-11-22 02:19:02 72704 ----a-w- c:\windows\system32\admparse.dll
2009-11-22 02:19:02 48128 ----a-w- c:\windows\system32\mshtmler.dll
2009-11-22 02:19:00 66560 ----a-w- c:\windows\system32\tdc.ocx
2009-11-22 02:19:00 34816 ----a-w- c:\windows\system32\imgutil.dll
2009-11-22 02:19:00 18944 ----a-w- c:\windows\system32\corpol.dll
2009-11-22 02:19:00 156160 ----a-w- c:\windows\system32\msls31.dll
2009-11-21 06:41:59 705536 ----a-w- c:\windows\system32\imagesp1.dll
2009-11-21 06:40:59 235520 ----a-w- c:\windows\system32\dot3gpui.dll
2009-11-21 06:39:59 87552 ----a-w- c:\windows\system32\WUDFCoinstaller.dll
2009-11-21 06:38:50 357888 ----a-w- c:\windows\system32\wbemcomn.dll
2009-11-21 06:38:50 102400 ----a-w- c:\windows\system32\wbem\mofinstall.dll
2009-11-21 06:38:48 139264 ----a-w- c:\windows\system32\SmiInstaller.dll
2009-11-21 06:38:48 129536 ----a-w- c:\windows\system32\sqmapi.dll
2009-11-21 06:38:40 35328 ----a-w- c:\windows\system32\mspatcha.dll
2009-11-21 06:38:40 305152 ----a-w- c:\windows\system32\msdelta.dll
2009-11-21 06:38:40 258560 ----a-w- c:\windows\system32\dpx.dll
2009-11-21 03:47:33 0 d-----w- c:\programdata\NCH Swift Sound
2009-11-21 03:42:31 0 d-----w- c:\programdata\NCH Software
2009-11-21 03:42:24 0 d-----w- c:\users\fritz\appdata\roaming\NCH Software
2009-11-21 03:42:24 0 d-----w- c:\program files\NCH Software
2009-11-21 01:53:15 0 d-----w- c:\programdata\FLEXnet
2009-11-21 00:34:46 0 d-----w- c:\program files\common files\Control Panels
2009-11-21 00:30:16 0 d-----w- c:\programdata\ALM
2009-11-21 00:24:59 28248 ----a-r- c:\windows\system32\AdobePDF.dll
2009-11-20 22:31:10 2463976 ----a-w- c:\windows\system32\NPSWF32.dll
2009-11-20 22:31:10 190696 ----a-w- c:\windows\system32\NPSWF32_FlashUtil.exe
2009-11-20 22:27:53 0 d-----w- c:\program files\Bonjour
2009-11-20 22:22:30 0 d-----w- c:\program files\common files\Macrovision Shared
2009-11-20 19:22:01 99004 ----a-w- C:\Webdrive settings.reg
2009-11-20 19:18:38 0 d--h--w- c:\programdata\WebDrive
2009-11-20 19:18:38 0 d-----w- c:\program files\WebDrive
2009-11-20 19:18:23 306688 ----a-w- c:\windows\IsUninst.exe
2009-11-20 18:59:47 0 d-----w- c:\programdata\LogiShrd
2009-11-20 18:56:44 301656 ----a-w- c:\windows\system32\BtCoreIf.dll
2009-11-20 18:56:37 84496 ----a-w- c:\windows\system32\KemXML.dll
2009-11-20 18:56:37 170512 ----a-w- c:\windows\system32\kemutb.dll
2009-11-20 18:56:37 145936 ----a-w- c:\windows\system32\KemUtil.dll
2009-11-20 18:56:37 117264 ----a-w- c:\windows\system32\KemWnd.dll
2009-11-20 18:56:05 0 d-----w- c:\programdata\Logitech
2009-11-20 17:55:33 44 ----a-w- c:\windows\system32\statistics.dat
2009-11-20 17:55:33 0 ----a-w- c:\windows\system32\rp_stats.dat
2009-11-20 17:55:33 0 ----a-w- c:\windows\system32\rp_rules.dat
2009-11-20 17:53:01 93360 ----a-w- c:\windows\system32\drivers\SBREDrv.sys
2009-11-20 17:43:40 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LHidFilt_01005.Wdf
2009-11-20 17:43:22 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LMouFilt_01005.Wdf
2009-11-20 17:40:12 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_LUsbFilt_01005.Wdf
2009-11-20 10:25:03 195456 ------w- c:\windows\system32\MpSigStub.exe
2009-11-20 10:15:51 61440 ----a-w- c:\windows\system32\winipsec.dll
2009-11-20 10:15:51 272896 ----a-w- c:\windows\system32\polstore.dll
2009-11-20 10:15:03 1820 ----a-w- c:\windows\system32\rasctrnm.h
2009-11-20 10:13:10 9728 ----a-w- c:\windows\system32\TCPSVCS.EXE
2009-11-20 10:13:10 904776 ----a-w- c:\windows\system32\drivers\tcpip.sys
2009-11-20 10:13:10 8704 ----a-w- c:\windows\system32\HOSTNAME.EXE
2009-11-20 10:13:10 27136 ----a-w- c:\windows\system32\NETSTAT.EXE
2009-11-20 10:13:10 19968 ----a-w- c:\windows\system32\ARP.EXE
2009-11-20 10:13:10 17920 ----a-w- c:\windows\system32\ROUTE.EXE
2009-11-20 10:13:10 17920 ----a-w- c:\windows\system32\netevent.dll
2009-11-20 10:13:10 11264 ----a-w- c:\windows\system32\MRINFO.EXE
2009-11-20 10:13:10 105984 ----a-w- c:\windows\system32\netiohlp.dll
2009-11-20 10:13:10 10240 ----a-w- c:\windows\system32\finger.exe
2009-11-20 10:13:09 30720 ----a-w- c:\windows\system32\drivers\tcpipreg.sys
2009-11-20 10:13:06 814 ----a-w- c:\windows\system32\wbem\WFP.MOF
2009-11-20 10:10:33 12880 ----a-w- c:\windows\system32\wbem\wlan.mof
2009-11-20 10:10:32 127488 ----a-w- c:\windows\system32\L2SecHC.dll
2009-11-20 10:10:31 68096 ----a-w- c:\windows\system32\wlanhlp.dll
2009-11-20 10:10:31 65024 ----a-w- c:\windows\system32\wlanapi.dll
2009-11-20 10:10:31 513536 ----a-w- c:\windows\system32\wlansvc.dll
2009-11-20 10:10:31 302592 ----a-w- c:\windows\system32\wlansec.dll
2009-11-20 10:10:31 293376 ----a-w- c:\windows\system32\wlanmsm.dll
2009-11-20 10:10:31 2501921 ----a-w- c:\windows\system32\wlan.tmf
2009-11-20 10:10:29 2334 ----a-w- c:\windows\system32\wbem\L2SecHC.mof
2009-11-20 10:10:28 15181 ----a-w- c:\windows\system32\gatherWirelessInfo.vbs
2009-11-20 10:09:41 72704 ----a-w- c:\windows\system32\fontsub.dll
2009-11-20 10:09:41 34304 ----a-w- c:\windows\system32\atmlib.dll
2009-11-20 10:09:41 289792 ----a-w- c:\windows\system32\atmfd.dll
2009-11-20 10:09:41 23552 ----a-w- c:\windows\system32\lpk.dll
2009-11-20 10:09:41 156672 ----a-w- c:\windows\system32\t2embed.dll
2009-11-20 10:09:41 10240 ----a-w- c:\windows\system32\dciman32.dll
2009-11-20 10:08:52 9728 ----a-w- c:\windows\system32\lsass.exe
2009-11-20 10:08:52 72704 ----a-w- c:\windows\system32\secur32.dll
2009-11-20 10:08:52 439864 ----a-w- c:\windows\system32\drivers\ksecdd.sys
2009-11-20 10:08:52 218624 ----a-w- c:\windows\system32\msv1_0.dll
2009-11-20 10:08:52 175104 ----a-w- c:\windows\system32\wdigest.dll
2009-11-20 10:08:52 1259008 ----a-w- c:\windows\system32\lsasrv.dll
2009-11-20 10:08:51 13780 ----a-w- c:\windows\system32\wbem\lsasrv.mof
2009-11-20 10:08:01 2868224 ----a-w- c:\windows\system32\mf.dll
2009-11-20 10:08:00 98816 ----a-w- c:\windows\system32\mfps.dll
2009-11-20 10:08:00 53248 ----a-w- c:\windows\system32\rrinstaller.exe
2009-11-20 10:08:00 24576 ----a-w- c:\windows\system32\mfpmp.exe
2009-11-20 10:08:00 2048 ----a-w- c:\windows\system32\mferror.dll
2009-11-20 10:03:48 71680 ----a-w- c:\windows\system32\atl.dll
2009-11-20 10:02:12 3600456 ----a-w- c:\windows\system32\ntkrnlpa.exe
2009-11-20 10:02:11 3548216 ----a-w- c:\windows\system32\ntoskrnl.exe
2009-11-20 10:00:32 160256 ----a-w- c:\windows\system32\wkssvc.dll
2009-11-20 09:59:56 53248 ----a-w- c:\windows\system32\tsgqec.dll
2009-11-20 09:59:56 136192 ----a-w- c:\windows\system32\aaclient.dll
2009-11-20 09:59:55 2066432 ----a-w- c:\windows\system32\mstscax.dll
2009-11-20 09:58:48 2048 ----a-w- c:\windows\system32\msxml3r.dll
2009-11-20 09:55:13 69632 ----a-w- c:\windows\system32\Mpeg2Data.ax
2009-11-20 09:53:20 623616 ----a-w- c:\windows\system32\localspl.dll
2009-11-20 09:52:50 91136 ----a-w- c:\windows\system32\avifil32.dll
2009-11-20 09:52:49 82944 ----a-w- c:\windows\system32\mciavi32.dll
2009-11-20 09:52:49 65024 ----a-w- c:\windows\system32\avicap32.dll
2009-11-20 09:52:49 31232 ----a-w- c:\windows\system32\msvidc32.dll
2009-11-20 09:52:49 12800 ----a-w- c:\windows\system32\msrle32.dll
2009-11-20 09:52:49 123904 ----a-w- c:\windows\system32\msvfw32.dll
2009-11-20 09:49:03 1808896 ----a-w- c:\windows\system32\NlsLexicons0046.dll
2009-11-20 09:49:03 1793536 ----a-w- c:\windows\system32\NlsLexicons0045.dll
2009-11-20 09:49:03 1411072 ----a-w- c:\windows\system32\NlsLexicons0047.dll
2009-11-20 09:49:02 1558016 ----a-w- c:\windows\system32\NlsLexicons0049.dll
2009-11-20 09:49:02 1236992 ----a-w- c:\windows\system32\NlsLexicons0020.dll
2009-11-20 09:49:01 1782272 ----a-w- c:\windows\system32\NlsLexicons0039.dll
2009-11-20 09:49:00 2136064 ----a-w- c:\windows\system32\NlsLexicons0021.dll
2009-11-20 09:45:35 6656 ----a-w- c:\windows\system32\kbd106n.dll
2009-11-20 09:34:24 37888 ----a-w- c:\windows\system32\printcom.dll
2009-11-20 09:33:37 2036736 ----a-w- c:\windows\system32\win32k.sys
2009-11-20 09:32:59 14848 ----a-w- c:\windows\system32\wshrm.dll
2009-11-20 09:32:07 43520 ----a-w- c:\windows\system32\msdxm.tlb
2009-11-20 09:32:07 313344 ----a-w- c:\windows\system32\wmpdxm.dll
2009-11-20 09:32:07 18432 ----a-w- c:\windows\system32\amcompat.tlb
2009-11-20 03:36:20 15880 ----a-w- c:\windows\system32\lsdelete.exe
2009-11-20 02:21:47 64288 ----a-w- c:\windows\system32\drivers\Lbd.sys
2009-11-20 02:19:38 0 dc-h--w- c:\programdata\{CFBD8779-FAAB-4357-84F2-1EC8619FADA6}
2009-11-20 02:19:24 0 d-----w- c:\programdata\Lavasoft
2009-11-20 02:19:24 0 d-----w- c:\program files\Lavasoft
2009-11-20 00:35:55 65536 ----a-w- c:\windows\ocsetup_cbs_install_NetFx3.dpx
2009-11-20 00:35:55 327680 ----a-w- c:\windows\ocsetup_cbs_install_NetFx3.perf
2009-11-20 00:35:55 25886720 ----a-w- c:\windows\ocsetup_install_NetFx3.etl
2009-11-20 00:33:24 41984 ----a-w- c:\windows\system32\netfxperf.dll
2009-11-20 00:26:55 27335 ----a-w- c:\users\fritz\appdata\roaming\nvModes.dat
2009-11-20 00:16:32 28672 ----a-w- c:\windows\system32\Apphlpdm.dll
2009-11-20 00:16:30 4240384 ----a-w- c:\windows\system32\GameUXLegacyGDFs.dll
2009-11-20 00:16:30 1696768 ----a-w- c:\windows\system32\gameux.dll
2009-11-20 00:14:58 84480 ----a-w- c:\windows\system32\INETRES.dll
2009-11-20 00:14:41 60928 ----a-w- c:\windows\system32\msasn1.dll
2009-11-20 00:13:37 784896 ----a-w- c:\windows\system32\rpcrt4.dll
2009-11-20 00:13:00 144896 ----a-w- c:\windows\system32\drivers\srv2.sys
2009-11-20 00:12:26 355328 ----a-w- c:\windows\system32\WSDApi.dll
2009-11-20 00:12:02 2048 ----a-w- c:\windows\system32\msxml6r.dll
2009-11-20 00:11:00 604672 ----a-w- c:\windows\system32\WMSPDMOD.DLL
2009-11-20 00:10:20 310784 ----a-w- c:\windows\system32\unregmp2.exe
2009-11-20 00:10:17 8147456 ----a-w- c:\windows\system32\wmploc.DLL
2009-11-20 00:10:16 7680 ----a-w- c:\windows\system32\spwmp.dll
2009-11-20 00:10:15 4096 ----a-w- c:\windows\system32\msdxm.ocx
2009-11-20 00:10:15 4096 ----a-w- c:\windows\system32\dxmasf.dll
2009-11-19 23:18:21 56816 ----a-w- c:\windows\system32\drivers\avgntflt.sys
2009-11-19 23:18:13 0 d-----w- c:\programdata\Avira
2009-11-19 23:18:13 0 d-----w- c:\program files\Avira
2009-11-19 23:15:27 2421760 ----a-w- c:\windows\system32\wucltux.dll
2009-11-19 23:14:56 87552 ----a-w- c:\windows\system32\wudriver.dll
2009-11-19 23:14:27 33792 ----a-w- c:\windows\system32\wuapp.exe
2009-11-19 23:14:27 171608 ----a-w- c:\windows\system32\wuwebv.dll
2009-11-19 22:42:45 0 ---ha-w- c:\windows\system32\drivers\Msft_Kernel_SynTP_01000.Wdf
2009-11-19 22:42:21 0 d-----w- c:\program files\Synaptics
2009-11-19 22:39:44 0 d-----w- c:\programdata\NVIDIA
2009-11-19 22:32:43 11776 ----a-w- c:\windows\system32\drivers\UVCFTR_S.SYS
2009-11-19 22:32:42 0 d-----w- c:\program files\Camera Assistant Software for Toshiba
2009-11-19 22:31:56 0 d-----w- c:\programdata\Roaming
2009-11-19 22:31:47 56 ----a-w- c:\windows\system32\IHV_Install.bat
2009-11-19 22:31:47 257 ----a-w- c:\windows\system32\install.xml
2009-11-19 22:31:30 0 d-----w- c:\programdata\Intel
2009-11-19 22:28:44 12 ----a-w- c:\windows\bthservsdp.dat
2009-11-19 22:28:35 49152 ----a-w- c:\windows\system32\TosBthSupport.dll
2009-11-19 22:27:54 0 d-----w- c:\program files\Protector Suite QL
2009-11-19 22:27:48 0 d-----w- c:\programdata\UIB
2009-11-19 22:25:54 0 d-----w- c:\program files\common files\Toshiba Shared
2009-11-19 22:24:57 285184 ----a-w- c:\windows\system32\drivers\tos_sps32.sys
2009-11-19 22:23:19 313888 ----a-w- c:\windows\system32\nvexpbar.dll
2009-11-19 22:23:19 1079840 ----a-w- c:\windows\system32\nvcpluir.dll
2009-11-19 22:23:18 768544 ----a-w- c:\windows\system32\nvcplui.exe
2009-11-19 22:23:18 420384 ----a-w- c:\windows\system32\nvcpl.cpl
2009-11-19 22:21:02 453152 ----a-w- c:\windows\system32\NVUNINST.EXE
2009-11-19 22:20:48 2359350 ----a-w- c:\windows\Bluestream.bmp
2009-11-19 22:16:19 32592 ----a-w- c:\windows\system32\msonpmon.dll
2009-11-19 22:14:14 0 d-----w- c:\programdata\Microsoft Help
2009-11-19 22:10:23 0 d-----w- C:\WORKSSETUP

==================== Find3M ====================

2009-12-16 16:50:49 86016 ----a-w- c:\windows\inf\infpub.dat
2009-12-16 16:50:48 143360 ----a-w- c:\windows\inf\infstrng.dat
2009-12-16 16:50:46 143360 ----a-w- c:\windows\inf\infstor.dat
2009-11-25 23:49:11 665600 ----a-w- c:\windows\inf\drvindex.dat
2009-11-25 02:55:38 37665 ----a-w- c:\windows\fonts\GlobalUserInterface.CompositeFont
2009-11-23 18:00:53 174 --sha-w- c:\program files\desktop.ini
2009-11-23 01:22:54 101888 ----a-w- c:\windows\system32\ifxcardm.dll
2009-11-23 01:22:51 82432 ----a-w- c:\windows\system32\axaltocm.dll
2009-11-21 06:40:20 916480 ----a-w- c:\windows\system32\wininet.dll
2009-11-21 06:34:39 71680 ----a-w- c:\windows\system32\iesetup.dll
2009-11-21 06:34:39 109056 ----a-w- c:\windows\system32\iesysprep.dll
2009-11-21 04:59:58 133632 ----a-w- c:\windows\system32\ieUnatt.exe
2009-11-20 09:49:00 5499904 ----a-w- c:\windows\system32\NlsLexicons0022.dll
2009-11-06 22:53:27 585640 ----a-w- c:\windows\fonts\Captureit.ttf
2009-10-08 21:08:01 555520 ----a-w- c:\windows\system32\UIAutomationCore.dll
2009-10-08 21:08:01 234496 ----a-w- c:\windows\system32\oleacc.dll
2009-10-08 21:07:59 4096 ----a-w- c:\windows\system32\oleaccrc.dll
2009-10-07 11:36:36 243712 ----a-w- c:\windows\system32\rastls.dll
2009-10-01 01:02:17 2537472 ----a-w- c:\windows\system32\wpdshext.dll
2009-10-01 01:02:05 30208 ----a-w- c:\windows\system32\WPDShextAutoplay.exe
2009-10-01 01:02:04 334848 ----a-w- c:\windows\system32\PortableDeviceApi.dll
2009-10-01 01:02:02 87552 ----a-w- c:\windows\system32\WPDShServiceObj.dll
2009-10-01 01:02:00 31232 ----a-w- c:\windows\system32\BthMtpContextHandler.dll
2009-10-01 01:01:59 546816 ----a-w- c:\windows\system32\wpd_ci.dll
2009-10-01 01:01:59 160256 ----a-w- c:\windows\system32\PortableDeviceTypes.dll
2009-10-01 01:01:56 60928 ----a-w- c:\windows\system32\PortableDeviceConnectApi.dll
2009-10-01 01:01:56 350208 ----a-w- c:\windows\system32\WPDSp.dll
2009-10-01 01:01:56 196608 ----a-w- c:\windows\system32\PortableDeviceWMDRM.dll
2009-10-01 01:01:56 100864 ----a-w- c:\windows\system32\PortableDeviceClassExtension.dll
2009-09-25 02:10:10 974848 ----a-w- c:\windows\system32\WindowsCodecs.dll
2009-09-25 02:07:08 189440 ----a-w- c:\windows\system32\WindowsCodecsExt.dll
2009-09-25 02:04:32 321024 ----a-w- c:\windows\system32\PhotoMetadataHandler.dll
2009-09-25 01:49:22 1554432 ----a-w- c:\windows\system32\xpsservices.dll
2009-09-25 01:48:08 351232 ----a-w- c:\windows\system32\XpsPrint.dll
2009-09-25 01:38:29 847360 ----a-w- c:\windows\system32\OpcServices.dll
2009-09-25 01:36:13 280064 ----a-w- c:\windows\system32\XpsGdiConverter.dll
2009-09-25 01:35:31 135680 ----a-w- c:\windows\system32\XpsRasterService.dll
2009-09-25 01:33:25 195584 ----a-w- c:\windows\system32\dxdiagn.dll
2009-09-25 01:33:15 829440 ----a-w- c:\windows\system32\d3d10warp.dll
2009-09-25 01:33:01 369664 ----a-w- c:\windows\system32\WMPhoto.dll
2009-09-25 01:32:59 252928 ----a-w- c:\windows\system32\dxdiag.exe
2009-09-25 01:31:53 519680 ----a-w- c:\windows\system32\d3d11.dll
2009-09-25 01:31:26 486912 ----a-w- c:\windows\system32\d3d10level9.dll
2009-09-25 01:31:21 161280 ----a-w- c:\windows\system32\d3d10_1.dll
2009-09-25 01:31:19 218112 ----a-w- c:\windows\system32\d3d10_1core.dll
2009-09-25 01:31:16 1030144 ----a-w- c:\windows\system32\d3d10.dll
2009-09-25 01:31:15 828928 ----a-w- c:\windows\system32\d2d1.dll
2009-09-25 01:30:23 481792 ----a-w- c:\windows\system32\dxgi.dll
2009-09-25 01:30:23 190464 ----a-w- c:\windows\system32\d3d10core.dll
2009-09-25 01:27:04 793088 ----a-w- c:\windows\system32\FntCache.dll
2009-09-25 01:27:04 37888 ----a-w- c:\windows\system32\cdd.dll
2009-09-25 01:27:04 1064448 ----a-w- c:\windows\system32\DWrite.dll
2009-09-24 22:54:55 258048 ----a-w- c:\windows\system32\winspool.drv
2009-09-24 22:54:53 667648 ----a-w- c:\windows\system32\printfilterpipelinesvc.exe
2009-09-24 22:54:52 26112 ----a-w- c:\windows\system32\printfilterpipelineprxy.dll
2006-11-02 12:42:02 30674 ----a-w- c:\windows\inf\perflib\0409\perfd.dat
2006-11-02 12:42:02 30674 ----a-w- c:\windows\inf\perflib\0409\perfc.dat
2006-11-02 12:42:02 287440 ----a-w- c:\windows\inf\perflib\0409\perfi.dat
2006-11-02 12:42:02 287440 ----a-w- c:\windows\inf\perflib\0409\perfh.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfi.dat
2006-11-02 09:20:21 287440 ----a-w- c:\windows\inf\perflib\0000\perfh.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfd.dat
2006-11-02 09:20:19 30674 ----a-w- c:\windows\inf\perflib\0000\perfc.dat

============= FINISH: 22:39:25.47 ===============

A: Annoying Virus with commercials / sounds running in the background

Hello and welcome to Bleeping ComputerWe apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.If you have since resolved the original problem you were having, we would appreciate you letting us know. If not please perform the following steps below so we can have a look at the current condition of your machine. If you have not done so, include a clear description of the problems you're having, along with any steps you may have performed so far.Upon completing the steps below another staff member will review and take the steps necessary with you to get your machine back in working order clean and free of malware.If you have already posted a DDS log, please do so again, as your situation may have changed.Use the 'Add Reply' and add the new log to this thread.Thanks and again sorry for the delay.We need to see some information about what is happening in your machine. Please perform the following scan:Download DDS by sUBs from one of the following links. Save it to your desktop.DDS.scrDDS.pifDouble click on the DDS icon, allow it to run.A small box will open, with an explaination about the tool. No input is needed, the scan is running.Notepad will open with the results.Follow the instructions that pop up for posting the results.Close the program window, and delete the program from your desktop.Please note: You may have to disable any script protection running if the scan fails to run. After downloading the tool, disconnect from the internet and disable all antivirus protection. Run the scan, enable your A/V and reconnect to the internet. Information on A/V control HERE

4 more replies
Answer Match 94.08%

Seeing all these posts - this is a common virus that is going on...I seem to be infected too! Need help - please! This began when a bogus Anti-Malware program called "Windows Recovery" took over my computer.

Symptoms:
The background went black;
my search engine results are being redirected;
audio commercials are playing in the background when the internet is not up and running;
and I am getting "Internet Explorer Script Errors"
When I run McAfee, Spybot and Malware - nothing is finding the issues.

Help Please!

DDS (Ver_11-03-05.01) - NTFSx86
Run by Rebecca at 22:26:33.09 on Fri 04/22/2011
Internet Explorer: 8.0.7600.16385
Microsoft Windows 7 Starter 6.1.7600.0.1252.1.1033.18.1014.160 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: IObit Security 360 *Enabled/Updated* {FAE2835A-B90A-9E7A-85DA-82DBDA7C1E3A}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\windows\system32\wininit.exe
C:\windows\system32\lsm.exe
C:\windows\system32\svchost.exe -k DcomLaunch
C:\windows\system32\svchost.exe -k RPCSS
C:\windows\System32\svchost.exe -k LocalServiceNetw... Read more

A:IE Script Error, Audio Commercials running in Background, Google Redirect Virus

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

11 more replies
Answer Match 86.1%

I have some type of malware on my computer. Can hear multiple commercials running in the background with no applications open.
Need some help. Was looking to do ComboFix

A:commercials running in background

No browsers open? Hmmmm have you already tried Malwarebytes? Combofix is really good but sometimes it could damage and delete your system files. Try Malwarebytes 1st before going with Combofix and if you do go with it, please create a system restore point in case something goes wrong.

4 more replies
Answer Match 85.26%

Every so often (2-3x a day) a tv commercial or infomercial will play in the background, no video, just audio. If I open up the "task manager" and the "process" tab, "iexplore.exe " is the program that I need to close in order for it to stop. Little while later it will pop back up and play me a little ditty.

I have windows XP home Edition, Svc. pk 3,
Pentium 4,
2.8 GHz
2 gig Ram

Any suggestion would be greatly appreciated. I'd buy the "magic bullet Blender" that I keep hearing about on these infomercials in the background if they would just stop!!

Thanks

ps. love the forum, lots of great info!!!

A:audio commercials running in the background

Hi,

Please do the following:

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.


NEXT



Download GMER Rootkit Scanner from here or here. Extract the contents of the zipped file to desktop.
Double click GMER.exe. If asked to allow gmer.sys driver to load, please consent .
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.


Click the image to enlarge it
In the right panel, you will see several boxes that have been checked. Uncheck the following ... Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and post it in your next reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

2 more replies
Answer Match 85.26%

Audio commercial is running constantly in my laptop even without any video.

I have windows vista home premium, Svc. pk 2 64bit,

No anti-virus software is working. Any suggestion would be greatly appreciated. It's really painful to hear that ads all the time.
here's my logs. Since Gmer couldn't be saved so I copied the log below.
Thanks


GMER 2.1.19163 - GMER - Rootkit Detector and Remover
Rootkit scan 2013-08-08 17:26:40
Windows 6.0.6002 Service Pack 2 x64 \Device\Harddisk0\DR0 -> \Device\Ide\IAAStorageDevice-1 TOSHIBA_ rev.LB01 232.89GB
Running: gmer.exe; Driver: C:\Users\Annie\AppData\Local\Temp\uglorpod.sys

---- Devices - GMER 2.1 ----
Device \Driver\iaStor \Device\Ide\IAAStorageDevice-1 fffffa800757f0a8
---- Disk sectors - GMER 2.1 ----
Disk \Device\Harddisk0\DR0 unknown MBR code
---- Registry - GMER 2.1 ----
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\[email protected] 1375989850
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\[email protected] 1375991650
Reg HKLM\SYSTEM\CurrentControlSet\Services\Tcpip\Parameters\Interfaces\[email protected] 1375993000
Reg HKLM\SYSTEM\CurrentControlSe... Read more

A:audio commercials running in the background

Hello and welcome to Tech Support Forum,

Please run the following:
We just need a scan right now so i can see what might be on your machine, so please exit the program without clicking the clean button if anything is found.

Please download Malwarebytes Anti-Rootkit (MBAR) from here Malwarebytes : Malwarebytes Anti-Rootkit and save it to your desktop.
Direct link to the file: http://downloads.malwarebytes.org/file/mbarBe sure to print out and follow the instructions provided on that same page.
Caution: This is a beta version so please be sure to read the disclaimer and back up any important data before using.
Doubleclick on the MBAR file you downloaded.
Approve the UAC prompt in Vista and newer operating systems.
Click OK on the next screen, to allow the package to extract the contents of the file to it's own folder, mbar.
By default, this will be on your desktop, though you can choose another location if you wish. We advise using the default location for simplicity.
mbar.exe will launch automatically. On some systems, this may take a few extra seconds. Please be patient and wait for the program to open.
After reading the Introduction, click 'Next' if you agree.
On the Update Database screen, click on the 'Update' button.
Once you see 'Success: Database was successfully updated' click on 'Next'.
Click the 'Scan' button.
With some infections, you may see two messages boxes.
1.'Could not load protection driver'. Click 'OK'.
2.'Could not load DDA driver'. Click 'Yes'... Read more

1 more replies
Answer Match 81.06%

okay I have ran SUPERantispyware, AVG Free, Antivirus.com online, CC & Malwarebytes.. And they all either say I have nothing wrong.. or that they fixed it.. But of course, they havent. One (I believe it is SUPERantispyware) said I have to download a program from another computer, then run it on mine.. Which I did, but it didnt fix it.

SO this is on my Sony Laptop. Running Windows 7.

If I turn my sound on, there is normally some sort of noise playing... Once it was Paula Deens show lol. Sometimes I cant figure out what it is.. it will just be music of some sort or random commercials. VERY annoying. I was even logged off last night. Sitting on the log on screen, and it was still playing. I turned off the wifi & at one point it did stop it.. But then after I tried it again, it still played. So I cant pinpoint if it is a Wifi thing or virus..

I think I have that redirect virus as well.. Sometimes I will click a link, or search for something, and it takes me to some other screen. But they dont seem to have the same names so it is hard for me to pinpoint what it is..

Besides all that, my laptop still gets the BSOD randomly, but I know that isnt a virus.. But it is something that happens..

Thanks for your help!

misty

A:random sounds/music/commercials playing virus?

DownloadTDSSkillerLaunch it.Click on change parameters-Select TDLFS file systemClick on "Scan".Please post the LOG report(log file should be in your C drive) Do not change the default options on scan resultsDownloadaswMBRLaunch it, allow it to download latest Avast! virus definitionsClick the "Scan" button to start scan.After scan finishes,click on Save logPost the log results hereDownloadESET online scannerInstall itClick on START,it should download the virus definitionsWhen scan gets completed,click on LIST of found threatsExport the list to desktop,copy the contents of the text file in your reply

15 more replies
Answer Match 80.22%

Well I JUST got this annoying virus....

It keeps repeating airwick and cleaning product commercials from the television.
It won't stop unless I mute the sound.

I don't know how to get rid of it!


P.S. this is my father's computer.... D:

A:Annoying virus repeating tv commercials! *PLEASE HELP!*

Hello and welcome to TSF

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Having problems with spyware and pop-ups? First Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 78.96%

This a was a prevous topic and I had tried to follow the suggestions but can't seem to follow.  I am fairly commputer stupid.  I have Run nortons's Anti Virus and come up with nothing.  I dowloaded to desktop and run the tdsskiller and it comes up clean.   The background noise/comnmercials will start and continue until I run  the tdsskiller program then stop for 2-5 mins then start again.  I need help.  I can't have issue when running my business as i deal with personal client information.  Help!

A:Help! I have some radio or Commercials playing in the background. Virus?

Hello, I will be helping you with your problems. Please be patient while I assist you. Some points for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do NOT run, install or uninstall any programs,  unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the top of your post, click on the Watch Topic Button, select Immediate No... Read more

8 more replies
Answer Match 77.28%

Hey all, so I have talked to my dad and found out I have a virus.  My PC has started to BSOD along with high CPU usage and background advertisements going on.  He shared his thread with me and I have started to take the steps necessary to get this fixed and want to make sure I do it correctly.  I have completed up to Step 6 in the Prep Guide Before Using Malware Removal Tools and Requesting Help to get to this point.  Any help would be greatly appreciated, my dad talked you all up so I am confident in the ability of everyone's work!  Thanks ahead of time!!
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16476
Run by Devin at 18:34:38 on 2014-04-15
Microsoft Windows 7 Home Premium   6.1.7600.0.1252.1.1033.18.8174.5042 [GMT -4:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {641105E6-77ED-3F35-A304-765193BCB75F}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Enabled/Updated* {DF70E402-51D7-30BB-99B4-4D23E83BFDE2}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
svchost.exe
c:\Program Files\Microsoft Security Client\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k Loca... Read more

A:Windows 7 Virus - Background Commercials - High CPU Usage - BSODs

Hello DevDep I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", ... Read more

29 more replies
Answer Match 74.76%

the problem started with an infection of the "security suite" malware. after using mbam, as well as a host of other malware/virus programs, i believe i was able to keep it at bay, but i'm not entirely sure it's gone. i now have random commercials running at various times on my computer, seeming to come from nowhere, very odd. my printer printed 25 pages of an article the other morning at 3am & this morning, printed a "shopping cart" for $198.00 of Norton Security Suite, which i have not purchased, nor visited & neither of my other two computers were on during either of these events. i'm concerned that i haven't fully eliminated whatever was left over of this "security suite" software, or that i have some sort of trojan on the computer allowing access to other viruses. this is honestly the strangest behavior i've seen from any of my computers, so i'm turning to you for help.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7600.16385
Run by mholcombe at 7:31:15 on 2011-11-29
Microsoft Windows 7 Ultimate 6.1.7600.0.1252.1.1033.18.4095.2393 [GMT -5:00]
.
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Windows... Read more

A:random audio commercials running in background & printing random items

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

14 more replies
Answer Match 73.5%

Background ads sounds keep running on my laptop. The ads start about a minute after windows starts and keep running, sometimes even two, three or four ad sounds run simultaneously. I have tried various solutions given at this forum as well as many other forums but to no avail. I initially posted my problem at http://www.bleepingcomputer.com/forums/t/519885/background-ad-sounds-keep-running-on-my-laptop/ and got some help from Broni. As per his advice, I ran the DDS and created the logs which are attached.
 dds.txt   10.06KB
  0 downloads
 attach.txt   6.75KB
  0 downloads
 
 

A:Ads sounds constantly running in the background

Hello! Welcome to BleepingComputer Forums!
My name is Georgi and and I will be helping you with your computer problems.
Before we begin, please note the following:
I will working be on your Malware issues, this may or may not, solve other issues you have with your machine.
The logs can take some time to research, so please be patient with me.
Stay with the topic until I tell you that your system is clean. Missing symptoms does not mean that everything is okay.
Instructions that I give are for your system only!
Please do not run any tools until requested ! The reason for this is so I know what is going on with the machine at any time. Some programs can interfere with others and hamper the recovery process.
Please perform all steps in the order received. If you can't understand something don't hesitate to ask.
Again I would like to remind you to make no further changes to your computer unless I direct you to do so. I will not help you if you do not follow my instructions.
 
 
Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatibale with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.
Double-click to run it. When the tool opens click Yes to disclaimer.
Press Scan button.
It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your re... Read more

9 more replies
Answer Match 73.5%

Background ad sounds keep running on my laptop. The ads start about a minute after windows starts and keep running, sometimes even two, three or four ad sounds run simultaneously. I have tried various solutions given at this forum as well as many other forums but to no avail. Please help.

A:Background ad sounds keep running on my laptop

You've got a malware outbreak. Download and install malwarebytes or something similar and scan your PC. After that, grab spybot search & destroy and scan with that. If neither of them are successful, run them both again while in safe mode.
(IMPORTANT: Make sure you update them both completely before running them. This is essential, as if they are out of date they will miss modern malware.)

6 more replies
Answer Match 69.3%

Lately, as soon as I get access to the internet, random music and commercials start playing through my headphones even if I have no programs at all running.

I found out this is the sound, but how do I find the souce of it so I can find out what's causing it?
The text in the red box translates to "Name not available"

http://picpaste.com/3c1ecff14d6682b18228b17d2badca82.jpg

A:Random sounds and commercials.

Hello and welcome to TSF.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification then click Subscribe.
----------

Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.Disable any script blocking protection
Right-click and Run as Administrator dds to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt

Attach.txt
----------

Please download TDSSKillerDouble click TDSSKiller.exe
Press Start Scan
If Malicious objects are found, select Skip by changing the Cure dropdown in the upper right.
Do Not Attempt To Fix Anything Now. We just need to look over the report and be sure we are removing the correct items.
Attach the log in your next replyA copy of the log will be saved automatically to the root of the drive (typically C:\)

----------

3 more replies
Answer Match 67.62%

My laptop started playing random sounds like commercials and music at weird times just two days ago. It also makes the sound of a mouse clicking in the background and will sometimes have the small window with the two option, "Restore last session" and "Go to homepage". This is quicky gone in less than a second. Finally, I noticed that if I'm browsing the web, even though the page is up it'll go into the background as though there is another window in front (but there isn't).

I use AVG free and a scan found nothing. I downloaded Malwarbytes and it found some things AVG missed but it didn't solve the problem. After some more searching I did a scan with ESETscan and this is what it came up with: Operating memory a variant of Win32/Miep.A trojan.

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 8.0.6001.18702
Run by Reed at 16:47:27 on 2012-06-22
Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.990.107 [GMT 1:00]
.
AV: AVG Anti-Virus Free *Enabled/Updated* {17DDD097-36FF-435F-9E1B-52D74245D6BF}
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
C:\Program Files\AVG\AVG9\avgchsvx.exe
C:\Program Files\AVG\AVG9\avgrsx.exe
C:\Program Files\AVG\AVG9\avgcsrvx.exe
svchost.ex... Read more

A:Random Sounds (commercials and music) Play

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

30 more replies
Answer Match 67.62%

HI, the other day I was downloading internet explorer 8 because i need it to see a website (i use google chrome,so my explorer was outdated) a day later i started hearing these annoying commercials out of the blue while i was on the internet...just the sound because nothing would come up. i already have used anti-malaware,spybot,superantispyware and AVG (is my regular antivirus software), please help.
 

More replies
Answer Match 67.62%

HI, the other day I was downloading internet explorer 8 because i need it to see a website (i use google chrome,so my explorer was outdated) a day later i started hearing these annoying commercials out of the blue while i was on the internet...just the sound because nothing would come up. i already have used anti-malaware,spybot,superantispyware and AVG (is my regular antivirus software), please help.

A:Annoying Commercials II

Hello and Welcome to TSF.

Please Subscribe to this Thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant notification by email, then click Add Subscription.

Please note that the forum is very busy and if I don't hear from you within three days this thread will be closed.

------------------------------------------------------

We want all our members to perform the steps outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post/attach the logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

------------------------------------------------------

19 more replies
Answer Match 66.78%

I am getting a google redirect virus. When ever I search in Google and click on a page it takes me to a spam site.
I am also getting random noises playing in the background.

I have attached the DDS log and did not include a GMER log since I am on a 64 bit system


.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 10.5.1
Run by Adam Ailion at 13:59:24 on 2012-08-22
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8079.4167 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {86355677-4064-3EA7-ABB3-1B136EB04637}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {3D54B793-665E-3129-9103-206115370C8A}
FW: McAfee Firewall *Enabled* {BE0ED752-0A0B-3FFF-80EC-B2269063014C}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\System32\spoolsv.exe
C:\... Read more

A:Google redirect virus - Random Sounds in background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

15 more replies
Answer Match 66.36%

Computer starting this yesterday afternoon.  I've read many posts and have tried, in Safe Mode, the following TDSSKill, RKill, Malware Bytes, SuperantiSpyware, ComboFix, HitmanPro, RogueKiller and the hoki poki and nothing has worked.  I believe it's to do with a malware called Rootkit.bot and it's corrupted my pcss.dll file.
 
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_x86 NETWORK
Internet Explorer: 8.0.7601.17514
Run by Administrator at 15:21:38 on 2014-04-11
Microsoft Windows 7 Professional   6.1.7601.1.1252.1.1033.18.3241.2421 [GMT -5:00]
.
AV: Trend Micro OfficeScan Antivirus *Enabled/Updated* {5D349EF8-873B-C657-917F-F1D93E101A7C}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Trend Micro OfficeScan Anti-spyware *Enabled/Updated* {E6557F1C-A101-C9D9-ABCF-CAAB459750C1}
FW: Trend Micro Personal Firewall *Enabled* {49A8346C-6900-54B6-B1B3-5F678736DDE9}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Program Files\SUPERAntiSpyware\SASCORE.EXE
C:\Program Files\Citrix\ICA Client\ssonsvr.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\ctfmon.exe
C:\Program Files\SUPERAntiSpyware\SUPERAntiSpyware.exe
C:\Windows\system32\ctfmon.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Program Files\Internet Explorer\iexplore.exe
C:\Windows\system32\conhost.exe
C:\Windows\system32\wbem\wmiprvse.exe
C:\Windows\system32\svchost.exe -k DcomLa... Read more

A:Computer Playing Random Audio (Sounds like radio commercials)

Hello pastorjames I would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the sa... Read more

28 more replies
Answer Match 66.36%

Ok, I am pissed at my computer its playing all these commercials in the background and nowhere to be found for me to close it or shut it off. I keep rebooting my laptop to take it off or turning off my speakers. What the hell is going on? what can I do to get rid of this? Please before I punch my screen on my laptop.

A:Commercials playing in the background: WTF?

Better to be POed rather than p____ on.

Use Firefox with NoScript and AdBlock Plus add-ons.

karl

3 more replies
Answer Match 66.36%

Hi, I went away for a couple of weeks and came back home and now my computer is playing sounds in the background. I have tried different ways of figuring out what it is, but have failed. The other issue that I am having is that when I try to go into safe mode it doesnt give me the option. I need help or else I wouldnt be here. I normally just read and I am able to fix an issues I have. Every post I have read states that the fix is specifically for that system. Anyone willing to help?

Thanks in advance. Please ask any questions and I'll try my best to answer them all.

Thanks.
 

More replies
Answer Match 66.36%

Since yesterday audio commercials for Burger King, Lysol and other products have begun playing in the background when I'm browsing my computer.They play even when the browsers aren't open.Needless to say this is veryveryVERY annoying.Heres my logLogfile of Trend Micro HijackThis v2.0.4Scan saved at 3:56:14 PM, on 8/4/2010Platform: Windows XP SP3 (WinNT 5.01.2600)MSIE: Internet Explorer v8.00 (8.00.6001.18702)Boot mode: NormalRunning processes:C:\WINDOWS\System32\smss.exeC:\WINDOWS\system32\winlogon.exeC:\WINDOWS\system32\services.exeC:\WINDOWS\system32\lsass.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\System32\svchost.exeC:\WINDOWS\System32\WLTRYSVC.EXEC:\WINDOWS\System32\bcmwltry.exeC:\WINDOWS\system32\svchost.exeC:\WINDOWS\system32\spoolsv.exeC:\Program Files\Common Files\LogiShrd\LVMVFM\LVPrcSrv.exeC:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exeC:\Program Files\Bonjour\mDNSResponder.exeC:\WINDOWS\Explorer.EXEC:\Program Files\Dell Network Assistant\hnm_svc.exeC:\Program Files\Java\jre6\bin\jqs.exeC:\Program Files\Common Files\LogiShrd\LVCOMSER\LVComSer.exeC:\Program Files\Norton... Read more

A:Commercials playing in background

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

3 more replies
Answer Match 66.36%

Whenever I turn on my computer there seems to be some sort of commercial or ads in the background, even all of my programs are closed. How do I need to go about getting rid of these..

A:Background noise such as Ads or commercials

Right Click on your task bar select Task Manager>Processes. Post a screen shot of all process. Make sure you click on "Show All Processes for all Users" button.

1 more replies
Answer Match 65.52%

Running Windows 8.1 and Firefox 37.0.2
Audio commercials playing in background at random times when running Firefox. Hasn't happened when not running Firefox (so far).
This started about a week ago. So far, this has happened only in Firefox; but, I am not absolutely sure it won't happen in IE as I use it almost none at all. If I close Firefox, the commercial stops immediately. Firefox and IE are the only browsers I have installed. I have reset Firefox to defaults, run Malwarebytes Antimalware, CCleaner, removed the hard disk and connected it to another system as a secondary drive and scanned for viruses. No change.
 

A:Audio Commercials Playing in Background

16 more replies
Answer Match 65.52%

i hear commercials playing on my laptop and i cant get rid of it...Edit: Moved topic from Bleeping Computer Announcements, Comments, & Suggestions to the more appropriate forum. ~ Animal

A:Commercials playing in background of laptop

Sounds like ( no pun intended ) a malware issue.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and save it to your desktop.Download Link 1Download Link 2MBAM may "make changes to your registry" as part of its disinfection routine. If using other security programs that detect registry changes (ie Spybot's Teatimer), they may interfere or alert you. Temporarily disable such programs or permit them to allow the changes.Make sure you are connected to the Internet.Double-click on mbam-setup.exe to install the application.
For instructions with screenshots, please refer to the How to use Malwarebytes' Anti-Malware Guide.When the installation begins, follow the prompts and do not make any changes to default settings.When installation has finished, make sure you leave both of these checked:Update Malwarebytes' Anti-MalwareLaunch Malwarebytes' Anti-MalwareThen click Finish.MBAM will automatically start and you will be asked to update the program before performing a scan.If an update is found, the program will automatically update itself. Press the OK button to close that box and continue.If you encounter any problems while downloading the definition updates, manually download them from here and just double-click on mbam-rules.exe to install.On the Scanner tab:Make sure the "Perform Quick Scan" option is selected.Then click on the Scan button.If asked to select the drives to scan, leave all the drives selected and click on the... Read more

1 more replies
Answer Match 65.52%

I seem to have picked up a virus. the most obvious symptom is that there are audio commercials playing with no applications open. I believe that the commercials are only running when i have an active intenet connection. The symptom that concerns me the most is that my task manager does not work properly, it has no tabs or menu options and it displays only the processes. i have checked these forums for anwers and found a similar problem. I followed the steps listed to fix the problem. First I ran Sophos rootkit removal tool, followed by Combofix. After i ran combo fix my computer stopped working temporarily saying that all registry keys were deleted, but after I rebooted that problem self corrected. The Final step I followed was to run kaspersky's TDSSKILLER. When i tried to run the cure function, it forced screen of death. twice. please help. Please tell instruct me which logs to post, and how to acess them

A:Audio Commercials playing in background

Hello jonesbrian1976,

If you still require assistance, kindly follow the instructions in our pre-posting topic New Instructions - Read This Before Posting for Malware Removal Help and post the requested logs in your next reply.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

1 more replies
Answer Match 64.68%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer
 
Originally I posted this in an incorrect forum but someone mentioned that I will probably need to run a log. If you can tell me how to go about doing that and a link to the software I may need I will get it right up

A:Random Audio Commercials Playing in Background

Please download Farbar Recovery Scan Tool and save it to your desktop.Note: You need to run the version compatible with your system. If you are not sure which version applies to your system download both of them and try to run them. Only one of them will run on your system, that will be the right version.Double-click to run it. When the tool opens click Yes to disclaimer.Press Scan button.It will make a log (FRST.txt) in the same directory the tool is run. Please copy and paste it to your reply.The first time the tool is run, it makes also another log (Addition.txt). Please attach it to your reply. Type the following in the edit box on FRST, after "Search:".rpcss.dllIt then should look like:Search: rpcss.dllClick Search button and post the log (Search.txt) it makes on the USB drive in your next reply.

32 more replies
Answer Match 64.68%

I have been trying to fix this issue for over a week now. After attempts to clean it I actually did a clean install or at least I believe I did. Still here. I even took my computer into a repair place got it back this afternoon and still hear the commercials playing in the background. So clearly they didnt fix it either. From all the research I have done I believe it to be the Rootkit.Boot.Harbinger.a. I have read some forums and used many of the tools that are suggested. Included AdwCleaner, Hitman Pro, Rkill, Roguekiller, Junkware Removal. Unfortunately nothing has worked. I currently have Malwarebytes installed my computer and that too usually finds nothing. Roguekiller seems to be the only one that ever finds malware but it doesnt seem to completely remove the virus. I finally figured out that the virus or at least part of it creates two registries in the internet section of the hkey current user. One being Emulation and the other being a GP rendering something. I am totally clueless and thought I could figure this out but clearly I am not an expert. With all that said I am looking for some guidance on getting rid of this virus once and for all.
 
Oh yeah I am running Windows 7 Professional on a Dell XPS computer

A:Random Audio Commercials Playing in Background

It's a virus infection.
 
Quick fix is to connect to the internet, then open your volume control mixer. You'll probably have an unknown audio device that is active. You can mute that device and the radio should stop.
 
This infection is the Zekos rootkit. I had a client infected with it a week ago. Removal takes careful work, because the virus patches itself to a crucial system file, and removing the file can cause a black screen on boot (which I had to deal with)
 
Once you've disabled the audio device I would start a thread in Virus, Spyware, Malware Removal Logs. You'll need to run and post a log of either DDS or Hijackthis.

3 more replies
Answer Match 64.68%

I'll visit a website occasionally and an audio "commercial" will suddenly start playing in the background, though I didn't click anything to start it. It's so annoying - I use Firefox, so is there perhaps any way to prevent this in the browser, or is it an operating system issue?
 

A:Annoying audio commercials playing while browsing Internet

7 more replies
Answer Match 64.26%

I have a laptop that plays commercials randomly without anything open on the pc. Malewarebytes says its blocking 66.45.56.109 but i continue to have the commercials play in the background no video just audio. Windows Vista 32 bit laptop. I have ran Malwarebytes , superantispyware , tdsskiller and nothing fixed it. Please help

A:Laptop Plays Commercials in background no Task open

Hi,
 
Please download Rkill (courtesy of BleepingComputer.com) to your desktop.
There are 2 different versions. If one of them won't run then download and try to run the other one.
You only need to get one of these to run, not all of them. You may get warnings from your antivirus about this tool, ignore them or shutdown your antivirus.
 rKill.exe: http://www.bleepingcomputer.com/download/rkill/dl/10/iExplore.exe (renamed rKill.exe): http://www.bleepingcomputer.com/download/rkill/dl/11/
Double-click on the Rkill desktop icon to run the tool.
If using Vista or Windows 7 right-click on it and choose  Run As Administrator.
A black DOS box will briefly flash and then disappear. This is normal and indicates the tool ran successfully.
If not, delete the file, then download and use the one provided in Link 2.
Do not reboot until instructed.
If the tool does not run from any of the links provided, please let me know.
You should see a text file on your desktop named Rkill.txt, please copy and paste that into your next reply.
 
xXToffeeXx~

4 more replies
Answer Match 63%

Randomly Plays audio commercials in the background. Very slow bogged down running pc.
 
DDS (Ver_2012-11-20.01) - NTFS_x86 
Internet Explorer: 8.0.6001.19088  BrowserJavaVersion: 10.45.2
Run by owner at 10:29:57 on 2014-01-18
#Option MBR scan  is disabled.
Microsoft® Windows Vista™ Home Premium   6.0.6001.1.1252.1.1033.18.3002.1636 [GMT -6:00]
.
AV: Trend Micro AntiVirus *Disabled/Outdated* {48929DFC-7A52-A34F-8351-C4DBEDBD9C50}
SP: Trend Micro AntiVirus *Disabled/Outdated* {F3F37C18-5C68-ACC1-B9E1-FFA9963AD6ED}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ================
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\SLsvc.exe
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Windows\system32\taskeng.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\taskeng.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamscheduler.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamservice.exe
C:\Program Files\SMINST\BLService.exe
C:\Program Files\CyberLink\Shared files\RichVideo.exe
C:\Program Files\Malwarebytes' Anti-Malware\mbamgui.exe
C:\Windows\system32\SearchIndexer.exe
C:\Windows\system32\DRIVERS\xaudio.exe
C:\Program Files\Yahoo!\SoftwareUpdate\YahooAUService.exe
C:\Program Files\Trend Micro\BM\TMBMSRV.e... Read more

A:Infected with Trojan Zekos & Plays Random audio Commercials in background

Hello StinkyweedI would like to welcome you to the Malware Removal section of the forum.Around here they call me Gringo and I will be glad to help you with your malware problems.Very Important --> Please read this post completely, I have spent my time to put together somethings for you to keep in mind while I am helping you to make things go easier, faster and smoother for both of us!Please do not run any tools unless instructed to do so.We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same... Read more

27 more replies
Answer Match 60.48%

I seem to have a very nasty bug that runs iexplorer in the background that produces some ads or something that I hear but cannot see. I also can't run spyhunter anymore or SDFix. It shows up in the task manager for a few mins or so and then goes away, but never runs.

After running RegCure once, I got a winsock error that had me down for several days. Just fixed that which allowed me back on the internet. Was going to do a complete wipe, but I can't even seem to do that. My pc is now running at 100% memory usage and I have no idea where to turn. PLEASE HELP!!

I have the DDS and attach....also Hijack This log as well.

A:redirecting virus and iexplorer running in background virus/spyware??

Hello Just D,Sorry about the delay. If you still need help, please post a new HijackThis log to make sure nothing has changed, and I'll be happy to look at it for you.Please do this:1. Download HijackThis? here:http://www.trendsecure.com/portal/en-US/th.../hijackthis.php2. Click 'Do a System Scan and Save log'.The HJT log will open in notepad.Thanks,tea

4 more replies
Answer Match 59.64%

I think I have a virus running in the background of my computer.  It's keeping my computer fan running constantly and the task manager seems to show a big percentage spike in usage sometimes when nothing is really happening.  I just got this computer a couple months ago so I don't think the fan is dirty, and it has really good features.  I've tried running a few antivirus programs and reinstalling Windows after deleting everything but that doesn't seem to be working.  I've pasted my FRST log below and attached the addition log.
 
 
Scan result of Farbar Recovery Scan Tool (FRST.txt) (x64) Version: 11-03-2015
Ran by David (administrator) on Lenovo-PC on 18-03-2015 00:10:02
Running from C:\Users\David\AppData\Local\Microsoft\Windows\INetCache\IE\HS6W1F3W
Loaded Profiles: David (Available profiles: David)
Platform: Windows 8.1 Pro (X64) OS Language: English (United States)
Internet Explorer Version 11 (Default browser: IE)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: http://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Processes (Whitelisted) =================
(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Lenovo.) C:\Windows\System32\ibmpmsvc.exe
(Softex Inc.) C:\Program Files\Lenovo\Fingerprint Manager Pro\OmniServ.exe
(Intel Corporation) C:\Windows\SysWOW64\In... Read more

A:Virus that Seems to Be Running in the Background

Hello, Welcome to BleepingComputer.I'm nasdaq and will be helping you.If you can please print this topic it will make it easier for you to follow the instructions and complete all of the necessary steps in the order listed.===Open notepad (Start =>All Programs => Accessories => Notepad). Please copy the entire contents of the code box below.
start

CloseProcesses:

(Pokki) C:\Users\David\AppData\Local\Pokki\Engine\StartMenuIndexer.exe
HKU\S-1-5-21-1693113198-3919520079-1835859029-1001\...\Run: [Pokki] => C:\Windows\system32\rundll32.exe "%LOCALAPPDATA%\Pokki\Engine\Launcher.dll",RunLaunchPlatform
SearchScopes: HKLM -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
C:\Users\David\AppData\Local\Pokki

End
Save the files as fixlist.txt into the same folder as FRSTRun FRST and click Fix only once and wait.Restart the computer normally to reset the registry.The tool will create a log Fixlog.txt please post it to your reply.===Please download AdwCleaner by Xplode onto your Desktop.Close all open programs and internet browsers.Double click on AdwCleaner.exe to run the tool.Click the Scan button and wait for the process to complete.Click the Report button and the report will open in Notepad.IMPORTANTIf you click the Clean button all items listed in the report will be removed.If you find some false positive items or programs that you wish to keep, Close the AdwCleaner windows.Close all open prog... Read more

29 more replies
Answer Match 59.22%

I have overlapping, obnoxious audio running in the background of all applications. No signs of any closable programs running. Malware Bytes detects and eliminates 4-6 objects every time it runs, but the problem persists upon reboot.

Let me know what I need to do!

--John

A:Virus running audio in Background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

3 more replies
Answer Match 59.22%

Hello,

I need some help, my computer has a malware virus (or 2) that I can't seem to get rid of. IE starts as the SYSTEM user on start up and constantly runs in the background periodically opening up a pop-up window. Killing the process in TaskManager doesn't work as a new one is spawned seconds later. Additionally, periodically an audio message will play, typically saying "congratulations, you won" or something else. Not sure if they are the same virus or not.

I've ran spybot, Malwarebytes, Hitman Pro, and Trojan Remover and they didn't find it. I tried running them in Safemode as well, nothing

Please help! I've read a bunch of threads, so I've attached my HijackThis log and have downloaded Combofix. If someone could please help that would be super appreciated

Thanks
 

A:Virus - Congratulations you won and IE always running in the background, HELP!

Hi

Please do the following:

Please download MBRCheck.exe to your desktop.

Be sure to disable your security programs
Double click on the file to run it (Vista and Windows 7 users will have to confirm the UAC prompt)
A window will open on your desktop
if an unknown bootcode is found you will have further options available to you, at this time press N then press Enter twice.
If nothing unusual is found just press Enter
A .txt file named MBRCheck_mm.dd.yy_hh.mm.ss should appear on your desktop.
Please post the contents of that file.

NEXT
Please download DDS from either of these links

LINK 1
LINK 2

and save it to your desktop.

Disable any script blocking protection
Double click dds.pif to run the tool.
When done, two DDS.txt's will open.
Save both reports to your desktop.
---------------------------------------------------
Please include the contents of the following in your next reply:

DDS.txt
Attach.txt.

NEXT
Download GMER Rootkit Scanner from here to your desktop. It will be a randomly named executable.

Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.
Click the image to enlarge it

In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan bu... Read more

1 more replies
Answer Match 58.8%

Hi guys, I'm experiencing quite a bit of trouble I've ran malwarebytez and tdsskiller in order to remove several infections yet my computer is still experiencing massive data use from this pesky hidden iexplore.exe, it doesn't even appear in my normal processes under task manager, I have to access resource monitor in order to view the processes. I'm also experiencing blue screens periodically, I'm not sure if that has to do with infection or maybe hardware/driver problems, any assistance would be much appreciated.

I'm getting real tired of these audio commercials interrupting my daily computer activities. Not to mention the massive amount of lag generated from it.

A:iexplore.exe running hidden audio commercials

Sorry forgot to include the DDS.txt and attach.

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 1.6.0_17
Run by Lloyd at 4:34:59 on 2012-10-09
Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.4094.2392 [GMT -7:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Windows\system32\WLANExt.exe
C:\Windows\system32\conhost.exe
C:\Windows\System32\spoolsv.exe
C:\Windows\system32\svchost.exe -k LocalServiceNoNetwork
C:\Program Files (x86)\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Windows\sy... Read more

3 more replies
Answer Match 58.8%

Hello,
I'm a new guest here although I've read messages before. I have a similar problem to another members post which was answered by a "Catbyte".
I have intermittent audio only...commercials that run in the bkgrd of my computer, they run randomly, day or night.. CATBYTE mentioned to this other person to dwnld a DDS frm a link he had, & then post the results DDS.txt & the other was Attach.txt to his reply.
I have those reports ready,, dont know who to send them to...also he mentioned running a GMER rootkit scanner..
any help would be great...
I have Win XP 2002 Ser. pk 3 Media Ed.
James
Funny, even now I had to turn my speakers off because the stupic audio of an infomercial started to play....:

A:audio commercials running in bkground.CATBYTE..need help please...Thx.

Post the DDS, Attach.txt and GMER logs you have, into this thread

19 more replies
Answer Match 58.8%

Hey guys, I'm not sure what I did or downloaded, but it seems that there's some program editing my IE exe file and running processes in the background. I'm at my wits end, if I hear another lysol commercial I'm going to break my computer. I was gonna try combofix but I decided to see what you guys had to say before I attempted it. Thanks for all the helpDDS (Ver_10-03-17.01) - NTFSx86 Run by John at 23:57:37.54 on Tue 07/27/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.3327.2410 [GMT -4:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}AV: AntiVir Desktop *On-access scanning enabled* (Updated) {AD166499-45F9-482A-A743-FDD3350758C7}============== Running Processes ===============C:\WINDOWS\system32\nvsvc32.exeC:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcssvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exeC:\Program Files\AVG\AVG9\avgcsrvx.exesvchost.exe 4C:\WINDOWS\system32\LEXBCES.EXEC:\WINDOWS\system32\spoolsv.exeC:\WINDOWS\system32\LEXPPS.EXEC:\WINDOWS\Explorer.EXEC:\PROGRA~1\AVG\AVG9\avgtray.exesvchost.exe 4svchost.exeC:\Program Files\Common Files\Apple\Mobile ... Read more

A:Hidden IE processes running, causing commercials

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Do not Attach logs unless I ask you to.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.Note** If you are having problems posting the complete log into this thread upload them here http://www.rapidshare.com/ and post the links in this thread Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Gmer is the best but can be hard to get a log lets try this and see what we get.Scan With RKUnHookerPlease Download Rootkit Unhooker Save it to your desktop.Now double-click on RKUnhookerLE.exe to run it.Click the Report tab, then click Scan.Check (Tick) Drivers, Stealth. Uncheck the rest. then Click OK.Wait till the scanner has finished and then click File, Sa... Read more

18 more replies
Answer Match 58.38%

When i search on google.com i usually get redirected to various sites such as get-answers-fast and hxxp://63.209.69.107 which I believe is Scour.
I also noticed that iexplore.exe is running in the background even after i shut down the browser I can hear ads running. When I check task manager, iexplore.exe keeps showing up even after I end the task. I need help in cleaning this out of my system. Thanks

.
DDS (Ver_2011-08-26.01) - NTFSx86
Internet Explorer: 9.0.8112.16421 BrowserJavaVersion: 1.6.0_29
Run by Joe at 21:15:11 on 2011-11-15
Microsoft Windows 7 Professional 6.1.7601.1.1252.1.1033.18.3046.1923 [GMT -6:00]
.
AV: Microsoft Security Essentials *Enabled/Updated* {108DAC43-C256-20B7-BB05-914135DA5160}
SP: Microsoft Security Essentials *Enabled/Updated* {ABEC4DA7-E46C-2F39-81B5-AA334E5D1BDD}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\ibmpmsvc.exe
C:\Windows\system32\svchost.exe -k RPCSS
c:\Program Files\Microsoft Security Client\Antimalware\MsMpEng.exe
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k n... Read more

A:Google redirects virus and IE running in the background

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.Do not run any other tool untill instructed to do so!Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.Run Combofix:You may be asked to install or update the Recovery Console (Win XP Only) if this happens please allow it to do so (you will need to be connected to the internet for this)Before you run Combofix I will need you to turn off any security software you have running, If you do not know how to do this you can find out >here< or >here<Combofix may need to reboot your computer more than once to do its job this is normal.You can download Combofix from one of these links.Link 1Link 2Link 3 1. Close any open browsers or any other programs that are open.2. Close/disable all anti virus and anti malware programs so they do not interfere with the r... Read more

17 more replies
Answer Match 57.96%

My dad probably clicked on one of those Facebook ads and got this virus and it's not getting spotted by AV or anti-spyware because it's disguised as iexplore.exe. I've tried MalWareBytes, Adaware, SpyBot S&D, and Super AntiSpyWare and none of these helped out. This virus causes there to be multiple instances of iexplore.exe running in the background even though I only use Firefox. It also causes my search results in Google, Yahoo, and Bing to be redirected once I try to click on one of the links that is brought up. I am able to copy and paste the actual URL into the address bar and it will go to the page I need and not be redirected to some sight that has nothing to do with my search.

.
DDS (Ver_2011-06-23.01) - NTFSx86 NETWORK
Internet Explorer: 8.0.6001.19019 BrowserJavaVersion: 1.6.0_21
Run by Nader at 1:47:16 on 2011-08-01
Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.2037.1079 [GMT -4:00]
.
SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k rpcss
C:\Windows\System32\svchost.exe -k secsvcs
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Window... Read more

A:iexplore.exe virus with multiple instances running in background

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything. We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here. To help Bleeping Computer better assist you please perform the following steps:*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resouce! To tell me this, please click on http://www.bleepingcomputer.com/logreply/412390 and follow the instructions there. If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.*************************************************** If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of this page). In that reply, please include the following inf... Read more

2 more replies
Answer Match 57.96%

Well, I fell for it and opened the WhatsApp voice message waiting email.  It opened up a zip file, with an .exe file and that's when I ran into all of my problems.  Browser (Google Chrome) started opening various random sites.  I ran Malwarebytes and had two Email.Trojan items that were put into quarantine.  I ran AVG which came up with nothing.  I ran ComboFix and CCleaner as well.  I don't know if I got rid of the virus however.  I have an administrative and guest side to my computer.  When I open the guest side and try to get my yahoo mail, the site comes up, but it won't work correctly (it looks odd, no images, when I click on mail, it does nothing).  From there, I went to my task manager and see that internet explorer is running in the background with mysterious sites and I don't have ie opened.  I'm not sure if this is related in any way to the WhatsApp virus, but I do know that I never had ie running in the background before I opened the .exe file.  Any suggestions or advice?  Thank you in advance.Edit: Moved topic from Virus, Trojan, Spyware, and Malware Removal Logs to the more appropriate forum, due to the absence of any malware logs in the topic. ~ Animal

A:WhatsApp Virus / IE now running in background in Task Manager

Bump.
 
Same here. Planning to reimage the machine but would prefer to have a solution because I think I will hear about more of these from friends and relatives. (I wasn't supposed to be that stupid but......)
 
Thanks.

2 more replies
Answer Match 57.96%

Hello, I know this is being posted alot but someone's help would be greatly appreciated!!

A few months ago my new laptop was infected w/the Win 7 antispyware malware/spyware/virus problems. I thought I had cleaned up but have had persistant problems ever since. Recently, I started to have constant audio ads playing in the background (in english and french!) when an internet browser is not running. I deleted mozilla firefox and itunes to see if something there was running, but it continues to run.

Somewhere I saw that iexplore.exe is on my computer but when I open task manager I dont see any programs running that could be causing this to play.



Thank you!
 

More replies
Answer Match 57.96%

Hello all,

Original post

http://www.techsupportforum.com/f100...en-444547.html

I've been reading and learning from multiple posts here, so thank you in advance for this wonderful page. my issue is not uncommon, but all the fixes I've seen for others, don't seem to work for me. So hopefully its an easy fix.

IE8 runs itself in the background, hidden so that it is not seen unless you run task manager. In TM you can see 4-20+ iexplorer.exe running at any given time.

I use google chrome. when I open IE8 and look in the history, it is sending itself to sites such as; canfind.org, alert4find.com, alertsfind.com, etc all search or even ad sites which plays music,commercials, sounds in my speakers.

when I kill iexplorer.exe in my TM it just restarts itself every few minutes. and procedes to run this garbage in my background.

I rate myself as an avid user and very competent on the computer, so hopefully I can make your job easy.

Thank you in advance for your time and knowledge.

-LordRed





DDS (Ver_09-12-01.01) - NTFSx86
Run by Ramey's at 16:33:07.96 on Thu 12/24/2009
Internet Explorer: 8.0.6001.18372
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.2047.1435 [GMT -8:00]


============== Running Processes ===============

C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
svchost.exe
C:\Program Files\AVG\AVG9\avgch... Read more

A:internet explorer running virus/malware in background?

Let's try this version of gmer.


Download GMER Rootkit Scanner from here to your desktop. Double click the exe file.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO, then use the following settings for a more complete scan.



Click the image to enlarge it


In the right panel, you will see several boxes that have been checked. Ensure the following are unchecked Sections
IAT/EAT
Drives/Partition other than Systemdrive (typically C:\)
Show All (don't miss this one)

Then click the Scan button & wait for it to finish.
Once done click on the [Save..] button, and in the File name area, type in "Gmer.txt" or it will save as a .log file which cannot be uploaded to your post.
Save it where you can easily find it, such as your desktop, and attach it in reply.

**Caution**
Rootkit scans often produce false positives. Do NOT take any action on any "<--- ROOKIT" entries

Also, please post the attach.txt from DDS. The attachment in the previous post has a gmer.exe file, but there's no attach.txt from DDS.

19 more replies
Answer Match 57.96%

Hello, I know this is being posted alot but someone's help would be greatly appreciated!!

A few months ago my new laptop was infected w/the Win 7 antispyware malware/spyware/virus problems. I thought I had cleaned up but have had persistant problems ever since. Recently, I started to have constant audio ads playing in the background (in english and french!) when an internet browser is not running. I deleted mozilla firefox and itunes to see if something there was running, but it continues to run.

Somewhere I saw that iexplore.exe is on my computer but when I open task manager I dont see any programs running that could be causing this to play.

Thank you kindly!
 

More replies
Answer Match 56.28%

I have unwanted TV commercials on my computer some of the time. Station that I do not watch on my computer. I have not sound files with this sound and I have never downed them either. They are station like the cooking channel or info commercials. I run PC tool virus software and it does not tell me there is anything wrong such as a virus. Can you help me and I am running windows xp professional. I do a lot of steaming video on utube and project free TV.

epssty

A:Unwanted sounds, unwanted TV commercials

Hello epssty Welcome to TSF.

Please follow our pre-posting process outlined here:

http://www.techsupportforum.com/f50/...lp-305963.html
After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one will be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 55.86%

When i switch my sound on on wndows xp there is a drum sound and a *dong* every now and then! most annoying when listening to radio or music.
How do i get rid of this?
 

A:annoying sounds

Control Panel > Sounds & Audio Devices > Sounds Tab - Sound Scheme select 'no sounds'.
 

2 more replies
Answer Match 55.86%

I don't like any background sounds playing while I use my computer; so I have the no sound profile on. One thing I noticed with IE7 is it clicks when you open new tabs.

SO, I turned off that sound through the options menu. Now, if I open a new tab by right-clicking and the selecting open new tab, everything is fine.

Sadly, if I use the much more efficient method; pushing (links) with the center scroll button on my mouse, it still makes that sound!

How can I get it to disable all sounds like this because its annoying listening to a nice guitar track and having a huge "CLICKKKKKUR" in the middle of it.
 

A:Annoying IE7 sounds!

6 more replies
Answer Match 55.86%

I don't know what happened but all of a sudden windows sounds are going crazy ,i hear em like every 3-5 sec or so ,right now as im typing ,it's very ridiculous.

Please help stop it...
 

More replies
Answer Match 55.02%

Ive run malware bytes, TDSSkiller, rkill rkill64, security check, adwcleaner, roguekiller, i have Eset, fully updated, it found rpcss.dll is infected, but cannot be cleaned.
 
i have also tried a restore point, but it turns out all my previous ones were deleted when this infected me and its the only one i have now
 
cannot reformat as i have no disk
No logs have found anything other than my rpcss.dll is continually being blocked and copies are being put into my quarantine but i still get sounds.
 
http://www.bleepingcomputer.com/forums/t/519636/audio-adverts-in-background-name-not-available/#entry3250991 this was my original thread, and here are my logs from DDS
 
 
 
 
DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 8.0.7601.17514  BrowserJavaVersion: 10.45.2
Run by Cain at 14:50:59 on 2014-01-05
Microsoft Windows 7 Ultimate   6.1.7601.1.932.81.1033.18.8107.3241 [GMT -5:00]
.
AV: ESET Smart Security 4.0 *Enabled/Updated* {CB0F8167-5331-BA19-698E-64816B6801A5}
SP: ESET Smart Security 4.0 *Enabled/Updated* {706E6083-750B-B597-533E-5FF310EF4B18}
SP: Windows Defender *Enabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: ESET Personal firewall *Enabled* {F3340042-195E-BB41-42D1-CDB495BB46DE}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\nvvsvc.exe
C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
C... Read more

A:Sounds in background "Name not Available"

Due to the lack of progress after several days of dealing with this annoying virus, i have gone ahead and reformatted my OS and erased my system32 in my old carryover, nothing has been found since.

2 more replies
Answer Match 55.02%

Hello,

I'm new here and need some help! I don't know much about computers except the basic stuff most users know. I have a virus (or maybe multiple viruses?).

Sometimes background noise such as a gaming noise (like guns shooting and people shouting), or the phrase "Congratulations, you won!" noise will come up in the background. Sometimes this happens even when I don't have an internet browser open.

Also on top of that random pop ups will come up. One is "Secret Crush Alert!" I've also had pop ups for random businesses including Progressive Auto Insurance, and other Auto-related advertisements. These also happen even if I don't have a browser open.

I've tried everything I know how to do. I've run Avast, ThreatFire, and PandaCloud. They all say the full system scan is complete, but the problem still happens! This has been going on for a couple of months.
Please help me.. am not sure what to do. My computer is a Windows XP 2002 Media Center Edition. It is an Intel Core™ 2 CPU. 6400 @ 2.13GHz.

Let me know if there's more info you need. Thank you!

More replies
Answer Match 55.02%

I want to be able to play background music on my web-site, but I want the music to continue to play even when the page is changed.

Then I want to be able to turn the background music off at a lter point.

Any suggestions.

Right now I am just using a quicktime movie and embed command in the html page. The problem is one the page is changed the music goes off.

Thanks!
 

A:Background Sounds

hi Chris......

use frames and have a static page contain the sound-file code
khaki
 

2 more replies
Answer Match 55.02%

Hello!
Last night, I started hearing ad video's in the background. I usually open multiple tabs and, some sites I go to, have video advertisements, so of course I just ignored it. Well, after closing IE, I realized the sounds were still coming from my PC. I ran AVG, which found no viruses. I also ran MalwareBytes, and it found about 8 infections, but the sounds are still coming (although, it DID fix this problem I was having with auto-arranging my desktop icons, ha!) Here's my log: Thank's in advance!

Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 12:15:29 PM, on 7/20/2012
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\AVG\AVG2012\avgwdsvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\CTsvcCDA.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\Program Files\AVG\AVG2012\avgnsx.exe
C:\Progra... Read more

A:Background ad sounds...

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems.I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At the ... Read more

18 more replies
Answer Match 55.02%

My computer won't stop making these annoying popping noises. I tried putting headphones in and I still hear the noises. Does this have something to do with the sound card?

I just recenty downloaded the new Microsoft Office 2007, the sounds sound similar to Microsoft Groove, I went ahead and uninstalled that particualar program and no help!!

More replies
Answer Match 54.6%

Please help:

About two weeks ago I started hearing strange noise coming from my computer - thinking I may have left a window open I paid it no mind - however it seems to be a continuing problem. All windows are closed and there are commercials playing in the background and sometimes multiple commercial noise playing over one another? I have tried to research the topic with little assistance - and my anti-virus doesn't detect anything wrong!? Sometimes I can have my computer on all day and there are no commercials - and some days I they won't stop playing...what is going on and how do I stop these commercials from playing for good!

Thanks!

A:Commercial sounds in background

Greetings and Welcome to The Forums!!My name is Gringo and I'll be glad to help you with your computer problems. I have put together somethings for you to keep in mind while I am helping you to make things go easier and faster for both of usPlease do not run any tools unless instructed to do so.
We ask you to run different tools in a specific order to ensure the malware is completely removed from your machine, and running any additional tools may detect false positives, interfere with our tools, or cause unforeseen damage or system instability.Please do not attach logs or use code boxes, just copy and paste the text.
Due to the high volume of logs we receive it helps to receive everything in the same format, and code boxes make the logs very difficult to read. Also, attachments require us to download and open the reports when it is easier to just read the reports in your post.Please read every post completely before doing anything.
Pay special attention to the NOTE: lines, these entries identify an individual issue or important step in the cleanup process.Please provide feedback about your experience as we go.
A short statement describing how the computer is working helps us understand where to go next, for example: I am still getting redirected, the computer is running normally, etc. Please do not describe the computer as "the same", this requires the extra step of looking back at your previous post.NOTE: At... Read more

11 more replies
Answer Match 54.6%

I'm using a pretty new HP Notebook with Window 7.

For the past week, I've been getting random ads, occasionally what sounds like porn clips, voices having a one sided conversation, music. etc All of which occur regardless if I'm browsing the internet or it's sitting without any programs open. I will get a high CPU usage alert when these sounds start.

I'm using Nortons which did not find anything. I've ran CCleaner, MalwareBytes, and I just finished running the Sophos rootkit remover which showed nothing.

Everything else on the laptop runs fine and I haven't noticed any interference when using Opera.

Any help with this matter would be appreciated.

Thanks for your time.
Payton

My logs

DDS (Ver_2012-11-20.01) - NTFS_AMD64
Internet Explorer: 9.0.8112.16464
Run by Page at 20:14:14 on 2013-03-02
Microsoft Windows 7 Home Premium 6.1.7601.1.1252.1.1033.18.8087.3646 [GMT -8:00]
.
AV: Norton Internet Security *Enabled/Updated* {63DF5164-9100-186D-2187-8DC619EFD8BF}
SP: Windows Defender *Disabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Norton Internet Security *Enabled/Updated* {D8BEB080-B73A-17E3-1B37-B6B462689202}
FW: Norton Internet Security *Enabled* {5BE4D041-DB6F-1935-0AD8-24F3E73C9FC4}
.
============== Running Processes ===============
.
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Program Files (x86)\HP SimplePass\TrueSuiteService.exe
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\S... Read more

A:Have random sounds, ads in background.

Hy
my name is Daniel and I will be assisting you with your Malware related problems.

Before we move on, please read the following points carefully. First, read my instructions completely. If there is anything that you do not understand kindly ask before proceeding.
Perform everything in the correct order. Sometimes one step requires the previous one.
If you have any problems while you are follow my instructions, Stop there and tell me the exact nature of your problem.
Do not run any other scans without instruction or Add/ Remove Software unless I tell you to do so. This would change the output of our tools and could be confusing for me.
Post all Logfiles as a reply rather than as an attachment unless I specifically ask you. If you can not post all logfiles in one reply, feel free to use more posts.
If I don't hear from you within 3 days from this initial or any subsequent post, then this thread will be closed.
Stay with me. I will give you some advice about prevention after the cleanup process. Absence of symptoms does not always mean the computer is clean.
My first language is not english. So please do not use slang or idioms. It could be hard for me to read. Thanks for your understanding.

Please download Gmer from here and save it to your Desktop. Double click on the randomly named GMER.exe. If asked to allow gmer.sys driver to load, please consent.
If it gives you a warning about rootkit activity and asks if you want to run scan...click on NO.

Clic... Read more

5 more replies
Answer Match 54.6%

I went to a site today and immediately realized it was a "bad" site, but was on a browser without WoT. (I was searching for the difference between a wet and a dry cappuccinno and ended up at some file server.) Anyway, shortly after, I could hear background sounds that sounded like a virus was found, but nothing popped up. I cleared my cache and went to eventvwr, and it showed Avira found an infection in the C:\Recycler folder. I mistakenly shut my computer off (pulled the cord out without realizing my battery was not in). Anyway, when it started back up, there were all sorts of sounds, so I held down SHIFT and turned off my network card. I ran Avira, but it was not getting it, so I went into Safe Mode and Malwarebytes found 5 infections. Deleted them. Rebooted, but still heard background "beeps", even with nothing open. Ran Malwarebytes again, and it found two more files-did away with them. How can I be sure this is clear? (And if it is, what is beeping in the background?)

I could probably get the exact url from my history of the site that seemingly started it, if it would help. I do not have a Boot CD (or a CD Drive). I did not run the 32-bit file, as I am not sure if my system is 32-bit or not. Thank you for any help.

Also, I have both Avira and Malwarebytes on my system, because as I understood it, one finds certain things the other does not look for and vice versa, but have also been told they should not both be there. Can someone clarify... Read more

A:Beeping Sounds in the Background

Hello, and welcome to TSF.

I am currently reviewing your log. I will be back with a fix for your problem as soon as possible.

Please subscribe to this thread to get immediate notification of replies as soon as they are posted. To do this click Thread Tools, then click Subscribe to this Thread. Make sure it is set to Instant Notification, then click Subscribe.

Please be patient with me during this time.

19 more replies
Answer Match 54.6%

So my computer all of the sudden will play the audio from various advertisements out of the blue. No window is open, there are no videos, just sound. It isn't anything profane, they are like Toyota and movie trailers. It's weird, I can't figure out what process is running to make that happen. Anyone seen anything like this or have an idea on how to fix it? Thanks

A:Advertising Sounds in Background

Hello and welcome,sounds like we need to get a couple scans to remove this infection.I have moved this from Vista to the Am I Infected forum.Please download the TDSS Rootkit Removing Tool (TDSSKiller.exe) and save it to your Desktop. <-Important!!!Be sure to download TDSSKiller.exe (v2.4.0.0) from Kaspersky's website and not TDSSKiller.zip which appears to be an older version 2.3.2.2 of the tool.Double-click on TDSSKiller.exe to run the tool for known TDSS variants.
Vista/Windows 7 users right-click and select Run As Administrator.If TDSSKiller does not run, try renaming it. To do this, right-click on TDSSKiller.exe, select Rename and give it a random name with the .com file extension (i.e. 123abc.com). If you do not see the file extension, please refer to How to change the file extension.Click the Start Scan button.Do not use the computer during the scanIf the scan completes with nothing found, click Close to exit.If malicious objects are found, they will show in the Scan results - Select action for found objects and offer three options.Ensure Cure (default) is selected, then click Continue > Reboot now to finish the cleaning process.A log file named TDSSKiller_version_date_time_log.txt (i.e. TDSSKiller.2.4.0.0_27.07.2010_09.o7.26_log.txt) will be created and saved to the root directory (usually Local Disk C:).Copy and paste the contents of that file in your next reply.Next run MBAM (MalwareBytes):Please download Malwarebytes Anti-Malware and sav... Read more

3 more replies
Answer Match 54.6%

I am having some random ads sounding in my computer. I tried closing all the programs but it still continues. I have done some research and think it is a trojan virus I have no idea what to do.

A:Random ads sounds in background

Hello and Welcome.

We want all our members to perform the steps outlined in the link I'll give you below, before posting for assistance. There's a sticky at the top of this forum, and a
Quote:




Spyware 1st Steps




link at the top of each page.

---------------------------------------------------------------------------------------------

Please follow our pre-posting process outlined here:

NEW INSTRUCTIONS - Read This Before Posting For Malware Removal Help - Tech Support Forum

After running through all the steps, you shall have a proper set of logs. Please post them in a new topic, as this one shall be closed.

If you have trouble with one of the steps, simply move on to the next one, and make note of it in your reply.

Please note that the Virus/Trojan/Spyware Help forum is extremely busy, and it may take a while to receive a reply.

1 more replies
Answer Match 54.6%

Is it possible to add a sound file as a background in an e-mail, allowing it to play when the message is opened?

E-mail program is Outlook 2002.

Thanks.
 

A:Email - Background Sounds

Yes.
But it's not worth the effort since so many people are security-minded or use some kind of email that doesn't play it back upon opening.

sekirt
 

2 more replies
Answer Match 54.6%

hi...i have been having random advertising pop ups come up on my computer and then every now and then i will hear random advertisements with audio run in the background but i have no idea where they are coming from...some say congratulations you've won and thats it...or sometimes it sounds like an advertisement for a cleaning product...idk...but here is my HJT file please help me as soon as possible...i am good with computer and have been working on this virus for awhile now i have gotten it better than what it use to be but i am missing somethin and i ran out of ideas...thnx
Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 11:36:17 PM, on 12/21/2009
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\Ati2evxx.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\Program Files\Symantec\LiveUpdate\ALUSchedulerSvc.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\Program Files\CodeMeter\Runtime\bin\CodeMeter.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\WINDOWS\system32\imapi.exe
C:\Program File... Read more

More replies
Answer Match 54.6%

My computer keeps running random noise in background, sometimes ads, Sometimes its fake news like the onion. I'm also having problems with google redirecting me. I've seen other posts on here with the same problem but this all seems over my head. Please help. Thanks

Sorry I didn't realize I was supposed to include this


Attach.zip


.
DDS (Ver_11-03-05.01) - NTFSx86
Run by HP_Administrator at 21:01:53.29 on Wed 05/18/2011
Internet Explorer: 8.0.6001.18702
Microsoft Windows XP Professional 5.1.2600.3.1252.1.1033.18.1015.279 [GMT -4:00]
.
AV: McAfee Anti-Virus and Anti-Spyware *Enabled/Updated* {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}
FW: McAfee Firewall *Enabled*
.
============== Running Processes ===============
.
C:\WINDOWS\system32\svchost -k DcomLaunch
svchost.exe
C:\WINDOWS\System32\svchost.exe -k netsvcs
C:\WINDOWS\system32\svchost.exe -k WudfServiceGroup
svchost.exe
C:\WINDOWS\system32\spoolsv.exe
svchost.exe
C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
C:\Program Files\Bonjour\mDNSResponder.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\system32\svchost.exe -k hpdevmgmt
C:\WINDOWS\system32\drivers\KodakCCS.exe
C:\WINDOWS\Explorer.EXE
c:\Program Files\Common Files\LightScribe\LSSrvc.exe
C:\Program Files\Common Files\Symantec Shared\PIF\{B8E1DD85-8582-4c61-B58F-2F227FCA9A08}\PIFSvc.exe
C:\Program Files\McAfee\SiteAdvisor\McSACore.exe
C:\Program Files\Common... Read more

A:Random background sounds ads

I think I was supposed to attach this too.

ark.zip

19 more replies
Answer Match 54.6%

Started a couple weeks ago when I got infected with AntivirusGT . Followed steps to remove and still have problems.I am now getting constant ad tabs popping up for everything. Sound wave of "Congratulations....you have won" and various audio commercials play "in the background" of the browser. Ran Malware and SuperAntiSpy.....and still have problems....Restored the system back 3 months also. So far nothing has cured it.All files requested are pasted below and attached.Thank you very much in advance.DDS (Ver_10-03-17.01) - NTFSx86 Run by Doody at 7:11:59.21 on Sun 07/18/2010Internet Explorer: 8.0.6001.18702Microsoft Windows XP Home Edition 5.1.2600.3.1252.1.1033.18.1278.266 [GMT -6:00]AV: AVG Anti-Virus Free *On-access scanning enabled* (Updated) {17DDD097-36FF-435F-9E1B-52D74245D6BF}AV: *On-access scanning disabled* (Outdated) {84B5EE75-6421-4CDE-A33A-DD43BA9FAD83}FW: *disabled* {94894B63-8C7F-4050-BDA4-813CA00DA3E8}============== Running Processes ===============C:\WINDOWS\system32\svchost -k DcomLaunchsvchost.exeC:\WINDOWS\System32\svchost.exe -k netsvcsC:\WINDOWS\system32\svchost.exe -k WudfServiceGroupC:\Program Files\AVG\AVG9\avgchsvx.exeC:\Program Files\AVG\AVG9\avgrsx.exesvchost.exesvchost.exeC:\Program Files\AVG\AVG9\avgcsrvx.exeC:\WINDOWS\system32\spoolsv.exesvchost.exeC:\Program Files\Common Files\Apple... Read more

A:Ads popping up and sounds in the background.

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.In the upper right hand corner of the topic you will see a button called Options. If you click on this in the drop-down menu you can choose Track this topic. By doing this and then choosing Immediate E-Mail notification and then clicking on Proceed you will be advised when we respond to your topic and facilitate the cleaning of your machine.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.Double click DeFogger to run the tool. The ap... Read more

19 more replies
Answer Match 54.6%

Starting today, my computer has randomly started playing music and advertisements on my computer, even when I have nothing opened up. Also, when I go to use my web browsers, the results of the search keep getting redirected. I have tried doing scans from many different anti-virus softwares, but none of the scans eliminates the problems. I have done scans on the following: AVG, Microsoft Security Essentials, Malware Bytes Anti-Malware, and Super Anti-Spyware. If you could help me with this problem, it would be very much appreciated because these problems are very annoying.
 

A:Background Sounds and Redirecting

Please go to the following link and run TDSSKiller:

http://support.kaspersky.com/viruses/solutions?qid=208280684

Allow it cure anything if prompted.

Please post the log back here.
 

1 more replies
Answer Match 54.6%

Hi !

A few days ago I felt that the Internet is slow, I'm not paying attention because I thought it was our internet provider. Shortly thereafter a strange radio station music started to play ! I cant find the solution for my problem. I try everything, spybot s&d,ad-aware...all kind of malware detection software and the problem is still here ! I notice that in my sound mixer i have one slider more than ussual but it is labeled "Name not available" ! When I mute that slider the music stops, but it is still connected to the net and taking my bandwith. I also check the services and process and didn't find anithing suspicious !

Please help me !
Sorry about my english !

Damir
 

A:Sounds playing in background !

Hi and Welcome!! My name is Jeff. I would be more than happy to take a look at your log and help you with solving any malware problems you might have. Logs can take a while to research, so please be patient and know that I am working hard to get you a clean and functional system back in your hands. I'd be grateful if you would note the following:

I will be working on your Malware issues, this may or may not, solve other issues you have with your machine.
The fixes are specific to your problem and should only be used for the issues on this machine.
Please continue to review my answers until I tell you your machine appears to be clear. Absence of symptoms does not mean that everything is clear.
It's often worth reading through these instructions and printing them for ease of reference.
If you don't know or understand something, please don't hesitate to say or ask!! It's better to be sure and safe than sorry.
Please reply to this thread. Do not start a new topic.

IMPORTANT NOTE : Please do not delete, download or install anything unless instructed to do so.
DO NOT use any TOOLS such as Combofix or HijackThis fixes without supervision. Doing so could make your system inoperable and could require a full reinstall of your Operating System and losing all your programs and data.

Vista and Windows 7 users:

These tools MUST be run from the executable. (.exe) every time you run them
with Admin Rights (Right click, choose "Run as Administrator&q... Read more

3 more replies
Answer Match 54.6%

i have a dell inspiron 1545 with vista basic,i recently had a problem so i restored it to the factory image and installed all the drivers.

problem is that the windows sounds like the startup sound and the asterisks etc are not loud enough even at the max volume.

The music and video etc. are loud and fine.but the general windows sounds are too low in volume even at max volume.and it recognizes it too because when i set the volume to max in the corner to next to the clock,the green bar fills only 20% or so when it beeps.

ive tried everything

im using IDT High Definition audio CODEC. help please

A:Annoying Windows sounds problem

Try this;

Click on the little speaker icon in your start-up bar. (bottom right next to the clock)

Then click on "mixer".

You can now adjust the system sounds in relation to other sounds.

6 more replies
Answer Match 54.6%

I have a laptop. Whenever i plug speakers (especially evident with headphones) i can hear the buzzing and beeping of, i guess, computer processes happening.

For instance, when i minimize or maximize a window, i'll hear a "bzzzzz" of the shrinking and growing.

When i download something, i'll hear short "bzz-bzz-bzz" sounds of what i assume is the data being written to disk.

When i move the mouse cursor, it makes "bzzzzzzzzzz" noises as well.

I have tried uninstalling and reinstalling the audio driver. All i know is that it's extremely annoying when i have to use headphones (which is often).

If there's anything you need to know, just let me know where i can find the info and i'll be happy to post it if it'll help you help me!

I just can't take this anymore!!

EDIT:

I have just noticed that when i play this gif from a website (http://www.lostpedia.com/wiki/Image:Turbine_Explosion.gif) the annoying buzzing sounds disappear. What is up with this?!
--Chris--

A:Annoying Computer Sounds, What Is Wrong?

How high are the volume controls set in your audio devices?

5 more replies
Answer Match 54.6%

Hi, I've been having this problem for a few days now. It seems after googleing (if that's a word) this problem, it isn't just me. I got two iexplore.exe in task manager that keep on popping back up, annoying pop-ups, and some weird sounds such as a very low tone siren, various click noises, and the download complete sound. I've run AVG, Ad-Aware, Spybot, and the Trend Micro Housecall website, but to no avail. Can anyone help?

Here is the Hijack this log.

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 1:31:09 PM, on 11/6/2008
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16735)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Lavasoft\Ad-Aware\aawservice.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Common Files\Apple\Mobile Device Support\bin\AppleMobileDeviceService.exe
C:\PROGRA~1\AVG\AVG8\avgwdsvc.exe
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\WINDOWS\system32\devldr32.exe
C:\WINDOWS\system32\CTsvcCDA.EXE
C:\WINDOWS\system32\nvsvc32.exe
C:\WINDOWS\system32\svchost.exe
C:\Program Files\Viewpoint\Common\ViewpointService.exe
C:\Program Files\HP\HP Software Update\HPWuSchd2.exe
C:\Program Files\HP\hpcoretech\hpcmpmgr.exe
C:\WINDOWS\system32\MsPMSPSv.exe
C:\WINDOWS\system32\hphmo... Read more

A:iexplore.exe pop-up annoying sounds problem

13 more replies
Answer Match 54.6%

Every time I type I get this annoying clicking sounds. I did everything that I know but still have this problem. Need help please. What to do? I have a 64-bit operating system, windows 8.1 on a laptop

More replies
Answer Match 54.18%

Hello.
 
For some Weeks i got this DNS Software on my PC. Now each time when i give an an Password, on GMX or Facebook, there is a new Site made with Comercial, sometimes very strange things too. An Friend and me are trying for 5 hours to set up the PC to Play Far Cry 4 in Coop Modus. Until now we failed, we read that we Need to give some ports free and we also tried some other things, all we found in the Internet. Now it is my last thinking that maybe the "Virus" made it break. Hopefully you ca help me here again to clean my PC.
 
thx a lot
 
Kingwolf
 
Well for sure, first step will be an scan or so ? I will wait for Instruction for being sure. ^^ thx a lot for your work and time

A:Virus, DNS... ? Commercials everywhere (blocking coop?)

Hi Kingwolf85,Welcome to BleepingComputer. My name is dbrisendine and I'll be helping you with this problem. Before I get into the removal of malware / correction of your problem, I need you to be aware of the following:Please read all of my response through at least once before attempting to follow the procedures described.I would recommend printing them out, if you can, as you can check off each step as you complete it. Also, as some of the cleaning may be done in Safe Mode and there will be no internet connection then, you will find that having the steps printed for reference speeds the cleaning process along. If there's anything you don't understand or isn't totally clear to you, please come back to me for clarification before you start those steps.All of the assistants and staff at BleepingComputer are here on a volunteer basis; please respect our time given to the cause of helping others.If you are going to be away for more than 4 days, please let me know here. (I will do the same for you.) We do realize that 'life happens' and situations arise unexpectedly; we just ask that you keep us up to date.Malware removal is a complex, multiple step process; please stay with me on this thread (don't start another thread) until I declare that your logs are clean and you are good to go. The absence of apparent issues does not mean your system is clean; I will tell you when everything looks good for you to go and help you remove the tools we have used.If any of the security progra... Read more

23 more replies
Answer Match 53.76%

Random sounds have been playing in my background. For example, just an hour ago, I could hear a news broadcast followed by a Miley Cyrus song. I open my task manager and noticed a file that stood out named b.exe. I closed the file and the sounds stopped. I opened up to the root folder of b.exe and found it in my Temp folder. Also in it were files labeled A - F. Is this is a virus or spyware of some sort? I ran a full system scan as well as scanned the folder using Norton and found nothing. What are the files that are listed A - F? Need help please.

A:Random Background Sounds Playing?

Hi IdiotSavant,

This is a case of an anti-lock spyware. It was on my rig too this morning same thing! World wide spyware launch! Try deleting the file and then restarting your system. The spyware is really bad for your rig if it is on too long!

Regards,
alienware
_________________________________________________________________________
Think I helped with your problem? Click the balance! Give me some rep! Thanks!

4 more replies
Answer Match 53.76%

I recently got Call of Duty World at War and found out that the patch required users with windows vista to have to set their sound format to 16 bit 44100 Hz (studio quality) However they released another patch since then that fixed the problem so I tried to set my format back to anything on 24 bit but then I get these faint clicking sounds, like when a tape player comes to the end of the tape and you can hear it click through the head sets, it sounds like that but is faint. Also I have noticed when I get mail it will make a scratching sound.

I have no idea what is causing this, the computer came set at 24 bit 192000 Hz and I had no problems but now that I am trying to reverse back it is making all these annoying sounds.

Does anyone know what is causing this?
 

A:Faint clicking sounds in background

Sounds like you're "bleeding" at certain frequencies and/or sound levels. Is the headset mini sterio plug or USB? If its not USB you can try that and see if the noise goes away. Also check all the levels on all your sound layers; one of them might be set to max instead of mid-range, and also check each input and output port/connection in the sound properties and turn off the ones not in use.

If there's a sound card in the system, sometimes moving it to the most distant port from the other components will help. I suspect the sound was there all the time but some setting is maxed out or the drivers increased the dynamic range or something like that and now disk activity and other noisy things going on in the computer are beind picked up. I've had several computers over the years with various bleed-thru noises and usually a USB headset will clear that up.
 

1 more replies
Answer Match 53.76%

I want to know a way to save a background sound in an email someone sends me that has an embedded .midi file as a background sound.

I did a Google advanced search on "saving a background sound", and I got ONLY one hit . . . an old 2002 thread in the PC Tools Community forum here: http://www.pctools.com/forum/showthread.php?t=18905​

I'm trying to do exactly what the user in that thread was asking about: save an embedded sound sent to me in an OE email.

MnInShdw in that thread had a solution, but it is convoluted. Nevertheless, I tried that (forwarding the subject email to my hotmail account, where hotmail shows the .mid file as an attachment, which can then be saved to the local HDD), and it DOES work.

But I saw in that thread that someone had another solution that was a lot more direct.

But . . . I don't know exactly what that person meant. Was that HTML code to be inserted somewhere, or was that person giving a URL where the solution is explained fully??

I tried cutting and pasting the http address in that post, but all I get is a tripod page that asks me to log in.

So, I PM'd "Nana" (the person in that thread that posted an alternate solution), but got a message saying "Nana's" PM in box was full and no longer accepting any more PM's. I also tried emailing Nana but got a message there that Nana was not accepting personal emails. (I suspect Nana is long gone).

Anyway, I hit a brick wall with this, and that&... Read more

A:Solved: Saving background sounds in OE

http://email.about.com/cs/oetipstricks/qt/et052202.htm
 

3 more replies
Answer Match 53.76%

I have an issue with music and commercials that just start playing on my computer. It will just start up and I cannot locate anything that shows something is playing. I followed your instructions for files to run before posting so I hope this is everything you wanted. I received this message when I ran the GMER report.

I'm not sure if this means anything or not. Here are the requested files and I would appreciate any help you can offer. I also have some files that ran from one of the scans but I do not have a subscription and cannot remove it.
DDS File:

.
DDS (Ver_2011-08-26.01) - NTFSAMD64
Internet Explorer: 9.0.8112.16421
Run by Kim at 21:07:46 on 2012-09-03
Microsoft Windows 7 Home Premium 6.1.7600.0.1252.1.1033.18.3767.1853 [GMT -4:00]
.
AV: Microsoft Security Essentials *Disabled/Updated* {9765EA51-0D3C-7DFB-6091-10E4E1F341F6}
SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
SP: Microsoft Security Essentials *Disabled/Updated* {2C040BB5-2B06-7275-5A21-2B969A740B4B}
.
============== Running Processes ===============
.
C:\Windows\system32\wininit.exe
C:\Windows\system32\lsm.exe
C:\Windows\system32\svchost.exe -k DcomLaunch
C:\Windows\system32\svchost.exe -k RPCSS
C:\Windows\System32\svchost.exe -k LocalServiceNetworkRestricted
C:\Windows\System32\svchost.exe -k LocalSystemNetworkRestricted
C:\Windows\system32\svchost.exe -k netsvcs
C:\Windows\system32\svchost.exe -k LocalService
C:\Windows\system32\svchost.exe -k NetworkService
C:\Window... Read more

A:Virus playinag music and commercials through computer

Please do the following:
Please download aswMBR.exe and save it to your desktop.
Double click aswMBR.exe to start the tool.
When asked if you want to download Avast's virus definitions please select Yes.
Click Scan
Upon completion of the scan, click Save log and save it to your desktop, and post that log in your next reply for review. Note - do NOT attempt any Fix yet.
You will also notice another file created on the desktop named MBR.dat. Right click that file and select Send To>Compressed (zipped) file. Attach that zipped file in your next reply as well.

NEXT
Please download TDSSKiller.zipExtract it to your desktop
Double click TDSSKiller.exe
when the window opens, click on Change Parameters
under ”Additional options”, put a check mark in the box next to “Detect TDLFS File System”
click OK
Press Start ScanAs we are only looking for a log of what is on the machine right now > choose to skip whatever is found
Then click Continue > Reboot now

Copy and paste the log in your next replyA copy of the log will be saved automatically to the root of the drive (typically C:\)

1 more replies
Answer Match 53.76%

I have been infected with an internet explorer virus. My computer will constantly play random audio commercials and constantly gets script error messages that relate to the current audio commercial playing through my speakers. If I end iexplorer.exe in task manager everything stops, but then starts again as soon as iexplorer.exe starts running again. I cant figure out how to see all the processes running in iexplorer.exe so I cant pinpoint where the virus is originating from. I just know the mem usage on iexplorer.exe gets bigger when the commercial starts playing. I have run symantec, eset, malwarebytes, hitman, IObit, super antispyware, and avira virus removal tools and none of them have been able to pinpoint the source of this virus. Please help me. Thanks in advance.

A:Im infected with an ie virus that play audio commercials please help!

I am having the same problem and I have tried malwarebytes and avg.

At first, it blanked my screen and remove all programs from start menu. But, that seems to be ok now. Also I get IE script errors usually before the audio clip starts.

Please help.

1 more replies
Answer Match 53.34%

So here's what happened. The mic on my headset stopped working so I jerked around with the computer- and Realtek HD Audio Manager settings. No luck, after this I have experienced some problems with my audio. Voices are super quiet but everything else sounds normal. I currently use the backside of my computer for my headset but I need to fix this.

Thank you!
 

A:I can no longer hear voices, only background sounds

What is your make/model of motherboard?
Have you tried another headset (or speakers) to determine if its the computer and not the headset? Try hooking up the headset to another computer and see if it works the correct way.
 

23 more replies
Answer Match 53.34%

This actually started a while ago when i would lose window focus to internet explorer. I found out it was IE thanks to Media player classic which would display what program it lost focus to if it were say, kicked out of fullscreen by something else. I didn't think much of it at the time since there were no noticeable errors beyond that. Apparently that was associated with the problem below.

Yesterday my nod32 started displaying messages blocking some "tombirdswithhair" site every few minutes, and was playing clicking sounds such as the ones IE typically gives when you click a link or something. I typed in "tombirdswithhair" in google and found out it seems to be associated with the mebroot virus that infects the MBR. I checked with a number of methods whether or not the mebroot was actually active and sharing my info, but according to a list of typical symptoms and checking with process explorer for anything that references the TEMP folder under "services", it seems i don't have a virus sharing my info or anything like that, unless it has since then been upgraded to further evade detection.

In any case, i decided to deal with the clicking sounds in the background, and on one forum they suggested a person with similar problem to use combofix. since it was the first i had ever heard about it and i wasn't exactly sure how powerful it was, i downloaded it and ran the program, without knowing it was going to automatically run its process without... Read more

A:IE Clicking sounds in background, mebroot variant?

also i have saved the combofix log, will post it if needed.

3 more replies
Answer Match 53.34%

I have the same problem. 7.1 onboard audio port (6 Jacks with mic and digital audio).
*I Uninstalled Realtek audio.
*Tried another headset - no change.
*Win7 recognized hardware and auto installed audio software.
STILL NOT SOLVED.

Mod note: Removed from this thread: http://www.techspot.com/community/t...s-only-background-sounds.194271/#post-1449726
 

A:I no longer hear voices, only background sounds

CarNetTech......Do you have 7.1 sound selected in 'Configure speakers' box?
 

2 more replies
Answer Match 53.34%

Is there a way to change the desktop background in Win 7 without switching sounds back on and my screen saver off? This is really annoying when all I want to do is change the background. I don't want to go through the same rigmarole each time of switching sounds off again and the screen saver back on every time I decide I fancy a different picture.

Anyone got any ideas?
 

More replies
Answer Match 53.34%

I am running windows me the problem. If I play an mp3 using winamp I get a
Background sound. That sounds like some one poring water into a jug . if I burn a cd
The same backgrounds sound is sill there if I play it in the car or in the home cd player
I am using nero pus I have tried other burning programs. There are no conflicts in device manager so I clicked on system information and conflict sharing came up with what I have copied and pasted hope some one can help all looks beyond me
Regards Keith

Conflicts/sharing

IRQ 10 Creative Sound Blaster PCI128 (WDM)
IRQ 10 Realtek RTL8139(A) PCI Fast Ethernet Adapter
IRQ 10 ACPI IRQ Holder for PCI IRQ Steering

I/O Port 0xF000-0xF00F AMD 756 PCI Bus Master Dual IDE Controller
I/O Port 0xF000-0xF00F Primary IDE controller (dual fifo)

I/O Port 0x03F6-0x03F6 AMD 756 PCI Bus Master Dual IDE Controller
I/O Port 0x03F6-0x03F6 Primary IDE controller (dual fifo)

I/O Port 0x01F0-0x01F7 AMD 756 PCI Bus Master Dual IDE Controller
I/O Port 0x01F0-0x01F7 Primary IDE controller (dual fifo)

IRQ 11 NVIDIA GeForce FX 5200
IRQ 11 AdvanSys PCI SCSI Host Adapter
IRQ 11 ACPI IRQ Holder for PCI IRQ Steering

Memory Address 0xEDE00000-0xEFEFFFFF AMD-751 PCI to PCI Bridge
Memory Address 0xEDE00000-0xEFEFFFFF NVIDIA GeForce FX 5200

IRQ 9 AMD 756 PCI to USB Open Host Controller
IRQ 9 ACPI IRQ Holder for PCI IRQ Steering

IRQ 14 AMD 756 PCI Bus Master Dual IDE Controller
IRQ 14 Primary IDE controller (dual fifo)

IRQ 15 AMD 756 PCI Bus Master Dual IDE... Read more

More replies
Answer Match 53.34%

For the past couple of days I've noticed that I would be in the middle of doing something on my computer, and then out of nowhere, random sounds pop up without me doing anything. Whether it be repeated "click" sounds or Asian ads and I'm not sure what it is that's causing this. Can anyone help me?

A:Random noises/sounds/ads in background of computer?

Hello ,

is this a desktop or laptop ?

now is this a clicking sound that is coming from the inside of your systems case ?

do here this only when you are doing certain things ?

does this happen as soon as you start up your system ?

does it start after a certain time like 10 minutes after starting or what ?

is it doing it now ?

do you know what type of hard drive it has in it/ as in the brand name ?

can you download this program & install it to give us your systems spec'c

follow link

http://www.majorgeeks.com/EVEREST_Fr...ion_d4181.html

also when was the last time you cleaned the inside of your systems case/tower ?

9 more replies
Answer Match 53.34%

Hello there, i have been having this very annoying problem since 1 week, i hope u guys can help me. Very often i am getting invisible audio ads running on the background even when no window is opened. sometimes i get some browser clicking sounds even when no one is using the computer. occasionally i get this weird message saying do you want internet explorer to be default browser. So i have these three problems right now. I am using Viper trial version of anti-virus, antispyware program. Every time i run the scan it says explorer32.hijacker is identified and quarantined but then it keeps coming back i guess. And then when i check what is running on the background i see ~tmpb.exe running, i dont know what that is but did come to know through googling that it is not something that u want on ur system.

I am using windows Xp media center edition
please let me know how to get the hijackthis log posted here, i am really really new to this stuff. thank you guys
 

A:annoying invisible audio ads along with browser clicking sounds

ok here is my hijackthis log

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 9:32:31 PM, on 1/7/2009
Platform: Windows XP SP3 (WinNT 5.01.2600)
MSIE: Internet Explorer v7.00 (7.00.6000.16762)
Boot mode: Normal

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Intel\Wireless\Bin\EvtEng.exe
C:\Program Files\Intel\Wireless\Bin\S24EvMon.exe
C:\Program Files\Intel\Wireless\Bin\WLKeeper.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\eHome\ehRecvr.exe
C:\WINDOWS\eHome\ehSched.exe
C:\WINDOWS\System32\GEARSec.exe
C:\Program Files\MediaMelon\bin\wrapper.exe
C:\Program Files\Dell\QuickSet\NICCONFIGSVC.exe
C:\Program Files\Norton Ghost\Agent\VProSvc.exe
C:\WINDOWS\system32\HPZipm12.exe
C:\Program Files\Intel\Wireless\Bin\RegSrvc.exe
C:\Program Files\Sunbelt Software\VIPRE\SBAMSvc.exe
C:\WINDOWS\system32\java.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\system32\dllhost.exe
C:\Program Files\Common Files\Symantec Shared\CCPD-LC\symlcsvc.exe
C:\WINDOWS\Explorer.EXE
C:\WINDOWS\ehome\ehtray.exe
C:\WINDOWS\system32\hkcmd.exe
C:\WINDOWS\system32\igfxpers.exe
C:\WINDOWS\system32\igfxsrvc.exe
C:\WINDOWS\stsystra.exe
C:\Program Files\Dell\QuickSet\quickset.exe
C:\Program Files\Synaptics\SynTP\SynTPE... Read more

3 more replies
Answer Match 52.92%

I have a computer that has several symptoms:Google search results redirect to spam sitesAudio commercials play in backgroundSometime system tray prevents startup due to W32/BlasterI have attempted to run Malwarebytes without much luck. Any help is greatly appreciated. (And yes, I am aware this computer has P2P installed currently -- it's not my machine -- but I will be removing it ASAP)..DDS (Ver_2011-06-12.02) - NTFSx86 Internet Explorer: 7.0.6000.17037 BrowserJavaVersion: 1.6.0_15Run by Phillip at 14:27:44 on 2011-06-22Microsoft? Windows Vista? Home Premium 6.0.6000.0.1252.1.1033.18.1014.132 [GMT -4:00]..============== Running Processes ===============.C:\Windows\system32\wininit.exeC:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Windows\system32\svchost.exe -k rpcssC:\Windows\System32\svchost.exe -k secsvcsC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\SLsvc.exeC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k LocalServiceNoNetworkC:\Program Files\Common Files\Apple\Mobile Devic... Read more

A:Virus playing audio commercials and google redirecting

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

13 more replies
Answer Match 52.92%

***Problem Fixed***Computer installed Combofix this morning after a few name changes were applied. After it completed I was able to run Spybot and a few other Malware/Virus scans perfectly. So as of right now we are golden!Thanks Bleeping for giving me prior know how on dealing with the PC Blues!- Zack Aldaz -The Faults H8SRTeeiiwwbxc.sysH8SRTbhngputqsj.datH8SRTHwqprtbpvi.dllH8SRTmfninqcusy.dllComputer Will Not Restore, error messages comes upWill Not Run SpyBotWill Not Run MalewarebytesWill Not Run Super Anti-spywareSpybot will install but won't run while the other 2 won't even install before crashing. Panda virus scan picked up 3 suspicious objects and I had them removed. The other virus scan Kasperkey? is out of commission via their website.Also when I am in an active window on Firefox something causes my active window to become inactive. Like someone is clicking a different program or inactive area for me.Commercials also run in the background with or without Firefox open. Windows Defender seems to crash while loading up with all system processes. Root Repeal crashes the computer every time and I get the blue screen with either a message about dumping memory or some other error. So I have just given up on Root for now.So... Yeah!!DDS (Ver_09-12-01.01) - NTFSx86 Run by Ali at 12:11:02.55 on Wed 12/30/2009Internet Explorer: 7.0.6002.18005Microsoft? Windows Vista? Home Premium 6.0.6002.2.1252.1.1033.18.3582.2537 [GMT -6:00]SP: Spybot - Search and Destro... Read more

A:Virus Plays Commercials - Root Repeal Crashes PC

Heya, Thanks for lettings us know.Since this topic appears to be resolved, I will now close it.If you need this topic re-opened please send me a PM.Everyone else, please start a new topic.With Regards,myrti

1 more replies
Answer Match 52.92%

I can't play any songs.. my napster dosen't let me listen to any songs... and when i open winamp it says MMSYSTEM002 a device.....
and my when i open icq it dosen't make any sounds !! there is nuthin wrong with my speakers cuz they are not the type that u just turn on they are attached to the screen ..and i 'v checked all the wirings and everything seems ok...HEeeeeeelppp me
everything is too quueit !!!!
thx lovable Jasmine
;
 

A:i can't play songs... and i can't hear any background sounds...HEEEEEEEEEElp

What operating system are you running?

Have you recently downloaded/installed any new software?

Have you checked Start>Settings>Control Panel>System>Device Manager tab, and checked the properties on your sound devices to see if the drivers are still installed?

Give us the full error message and let us know what system changes if any you have made.
 

1 more replies
Answer Match 52.92%

I'm periodically hearing wierd sounds and advertisements in the background. My McAfee, AVS and Spyware Doctor isn't able to find anything infections in my system.

Here is my hijack log. Can someone interpret and see any issues?

Logfile of Trend Micro HijackThis v2.0.2
Scan saved at 12:58:28 PM, on 9/2/2008
Platform: Windows Vista SP1 (WinNT 6.00.1905)
MSIE: Internet Explorer v7.00 (7.00.6001.18000)
Boot mode: Normal

Running processes:
C:\Windows\system32\taskeng.exe
C:\Windows\system32\Dwm.exe
C:\Windows\Explorer.EXE
C:\Program Files\Windows Defender\MSASCui.exe
C:\Windows\RtHDVCpl.exe
C:\Program Files\Common Files\InstallShield\UpdateService\issch.exe
C:\Program Files\Common Files\Roxio Shared\9.0\SharedCOM\RoxWatchTray9.exe
C:\Program Files\CyberLink\PowerDVD DX\PDVDDXSrv.exe
C:\Program Files\Common Files\Real\Update_OB\realsched.exe
C:\Program Files\PowerISO\PWRISOVM.EXE
C:\Program Files\Java\jre1.6.0_07\bin\jusched.exe
C:\Program Files\Microsoft Office\Office12\GrooveMonitor.exe
C:\Program Files\HP\HP Software Update\hpwuSchd2.exe
C:\Program Files\iTunes\iTunesHelper.exe
C:\Program Files\McAfee.com\Agent\mcagent.exe
C:\Program Files\SiteAdvisor\6261\SiteAdv.exe
C:\Windows\System32\rundll32.exe
C:\Windows\System32\rundll32.exe
C:\Program Files\Windows Sidebar\sidebar.exe
C:\Program Files\Google\GoogleToolbarNotifier\1.2.1128.5462\GoogleToolbarNotifier.exe
C:\Program Files\Windows Live\Messenger\msnmsgr.exe
C:\Program Files\Windows Media Player\wmpnscfg.exe
C:\... Read more

A:I'm hearing wierd sounds, voices and advertisements in background.

Welcome to TSG

Please download the OTMoveIt2 by OldTimer.

Save it to your desktop.
Please double-click OTMoveIt2.exe to run it.
Copy the file paths below to the clipboard by highlighting ALL of them and pressing CTRL + C (or, after highlighting, right-click and choose copy):

[Kill Explorer]
C:\Users\ENDUSE~1\AppData\Local\Temp\nya.exe
C:\Windows\system32\afisicx.exe
C:\Windows\system32\mabidwe.exe
C:\Windows\system32\macidwe.exe
C:\Windows\system32\noxtcyr.exe
C:\Windows\system32\Nobicyt.exe
C:\Windows\system32\noytcyr.exe
C:\Windows\system32\routing.exe
C:\Windows\system32\roxtctm.exe
C:\Windows\system32\roytctm.exe
C:\Windows\system32\sobicyt.exe
C:\Windows\system32\sotpeca.exe
C:\Windows\system32\soxpeca.exe
C:\Windows\system32\tdxdowkc.exe
C:\Windows\system32\wsldoekd.exe
C:\Windows\system32\tdydowkc.exe
C:\Windows\system32\wserving.exe
afisicx <delete service>
mabidwe <delete service>
macidwe <delete service>
NOBICYT <delete service>
noxtcyr <delete service>
noytcyr <delete service>
Routing <delete service>
roxtctm <delete service>
roytctm <delete service>
sobicyt <delete service>
sotpeca <delete service>
soxpeca <delete service>
tdxdowkc <delete service>
tdydowkc <delete service>
WServing <delete service>
wsldoekd <delete service>
[Start Explorer]

Return to OTMoveIt2, right click on the "Paste List of Files/Folders to be moved" window and choose Pas... Read more

1 more replies
Answer Match 52.92%

Hello BC community I have found files that indicated that I was Ratted using Darkcomet few month I cleaned these files and did many scans and found nothing, then I have started hearing these Internet explorer loading sounds on the background which sounds like "tock tock". I'm sorry it took me long enough to post I was really busy with work.DDS (Ver_2012-11-20.01) - NTFS_AMD64Internet Explorer: 8.0.7601.17514 BrowserJavaVersion: 10.65.2Run by Sam at 15:30:05 on 2014-10-16Microsoft Windows 7 Ultimate 6.1.7601.1.1252.1.1033.18.7879.3552 [GMT 2:00].AV: Bitdefender Antivirus *Enabled/Updated* {9A0813D8-CED6-F86B-072E-28D2AF25A83D}SP: Bitdefender Antispyware *Enabled/Updated* {2169F23C-E8EC-F7E5-3D9E-13A0D4A2E280}SP: Windows Defender *Disabled/Outdated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}FW: Bitdefender Firewall *Enabled* {A23392FD-84B9-F933-2C71-81E751F6EF46}.============== Running Processes ===============.C:\Windows\system32\lsm.exeC:\Windows\system32\svchost.exe -k DcomLaunchC:\Program Files\Bitdefender\Bitdefender 2015\vsserv.exeC:\Windows\system32\svchost.exe -k RPCSSC:\Windows\System32\svchost.exe -k LocalServiceNetworkRestrictedC:\Windows\System32\svchost.exe -k LocalSystemNetworkRestrictedC:\Windows\system32\svchost.exe -k netsvcsC:\Windows\system32\svchost.exe -k LocalServiceC:\Windows\system32\igfxCUIService.exeC:\Program Files\Sandboxie\SbieSvc.exeC:\Windows\system32\svchost.exe -k NetworkServiceC:\Windows\System32\spoolsv.exeC:\Windows\system32\svchost.exe -k L... Read more

A:I was Keylogged and I hear IE page loading sounds on the background

Hello and welcome to Bleeping Computer! I am HelpBot: an automated program designed to help the Bleeping Computer Staff better assist you! This message contains very important information, so please read through all of it before doing anything.
We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.
To help Bleeping Computer better assist you please perform the following steps:
*************************************************** In order to continue receiving help at BleepingComputer.com, YOU MUST tell me if you still need help or if your issue has already been resolved on your own or through another resource! To tell me this, please click on the following link and follow the instructions there.CLICK THIS LINK >>> http://www.bleepingcomputer.com/logreply/552181 <<< CLICK THIS LINK
If you no longer need help, then all you needed to do was the previous instructions of telling me so. You can skip the rest of this post. If you do need help please continue with Step 2 below.
***************************************************If you still need help, I would like you to post a Reply to this topic (click the "Add Reply" button in the lower right hand of t... Read more

29 more replies
Answer Match 52.92%

Not every time the computer loads, but occasionally I will have extra background audio ads that play randomly in the background of my computer, even when no programs are running at all. Sometimes it is just people talking and it's not really even an ad at all. I can run RKill to get rid of it for the time being, but other than that, nothing works. This audio in the background is the only problem for the computer. No other noticeable viruses, etc. Thanks for the help.

A:Audio ads/sounds playing in background occasionally on startup

Download and run Adwcleaner and see if it helps.

25 more replies
Answer Match 52.92%

I patched it to get a Windows XP theme but after I patched and restarted it's making an annoying noise when in logon screen and after logging on. The sound is also a bit scary sounding and creepy. I don't know if I'll wanna use my computer at night after this. Someone please help any advice would be appreciated. :'(

A:Computer making scary and annoying sounds after patching for themes.

Hi,
I have a hard time believing your system spec's
64 bit Pro with 2gb of ram ?

How exactly did you "Patch" to get a x-p theme ?

Sounds like a win-7 starter or basic edition to me :/

5 more replies
Answer Match 52.5%

It's been awhile now that my computer has been playing audio ads in the background and I am unable to locate the website that's open...I attempted to post this a couple of months ago but was dropped... so I again am attempting to see if you guys can fix this. Incl. are the posts as required:
Logfile of Trend Micro HijackThis v2.0.4
Scan saved at 6:53:21 PM, on 10/16/2012
Platform: Windows 7 SP1 (WinNT 6.00.3505)
MSIE: Internet Explorer v9.00 (9.00.8112.16446)
Boot mode: Normal
Running processes:
C:\Program Files (x86)\Motorola\MotoHelper\MotoHelperAgent.exe
C:\Program Files (x86)\NETGEAR Genie\bin\NETGEARGenie.exe
C:\Program Files (x86)\NETGEAR Genie\bin\genie2_tray.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\Internet Explorer\iexplore.exe
C:\Program Files (x86)\HP\Digital Imaging\smart web printing\hpswp_clipbook.exe
C:\windows\SysWOW64\Macromed\Flash\FlashUtil32_11_4_402_265_ActiveX.exe
C:\Users\boogyman\Desktop\HijackThis.exe
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://start.toshiba.com/?cid=C001B2Y
R1 - HKCU\Software\Microsoft\Internet Explorer\Main,Search Page = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = http://go.microsoft.com/fwlink/?LinkId=69157
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = http://go.microsoft.com/fwlink/?LinkId=54896
R1 - HKLM\Software\Microsoft\Internet Explorer\Main,Sea... Read more

A:Annoying ads in background

16 more replies
Answer Match 52.5%

Good day and thanks in advance!
I type this as I listen to a Toyota commercial...Windows XP pro
I was attacked by windows restore virus and used malwarebytes to clean. After clean all program files were hidden,script errors mentioning random website popping up and the random commercials and I'm being re-directed on IE.
I have run Malwarebytes, superandtispyware cleaner and combofix(didn't know what I was doing with that one though)
done all I know to do..I have unchecked most all folders hidden boxes so I now have a usable computer just a few more issues (that I know of)
Also I can not disable Symantec and it is logging all of my attempts to clean...it never says blocked.
here is a hijack this scan

Thank you!!!!!

Logfile of HijackThis v1.99.1
Scan saved at 4:38:56 PM, on 4/26/2011
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v8.00 (8.00.6001.18702)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\SPBBC\SPBBCSvc.exe
C:\WINDOWS\system32\spoolsv.exe
C:\Program Files\Common Files\Apple\Mobile Devic... Read more

A:Random commercials playing, script errors after virus removal

Hello and Welcome to the forums! My name is Gringo and I'll be glad to help you with your computer problems. Somethings to remember while we are working together.Do not run any other tool untill instructed to do so!Please Do not Attach logs or put in code boxes.Tell me about any problems that have occurred during the fix.Tell me of any other symptoms you may be having as these can help also.Do not run anything while running a fix.We apologize for the delay in responding to your request for help. Here at Bleeping Computer we get overwhelmed at times, and we are trying our best to keep up. Please note that your topic was not intentionally overlooked. Our mission is to help everyone in need, but sometimes it takes just a little longer to get to every request for help. No one is ignored here.Click on the Watch Topic Button and select Immediate Notification and click on proceed, this will help you to get notified faster when I have replied and make the cleaning process faster.In order for me to see the status of the infection I will need a new set of logs to start with.Please print out or make a copy in notpad of any instructions given, as sometimes it is necessary to go offline and you will lose access to them.DeFogger: Please download DeFogger to your desktop.

Double click DeFogger to run the tool.
The application window will appear Click the Disable button to disable your CD Emulation drivers Click Yes to continue A 'Finished!' message will ap... Read more

3 more replies
Answer Match 52.08%

Hey guys, I recently had my computer crash on me for the first time in a long time. After it rebooted, I noticed that random audio was playing in the background. It almost sounds like a bunch of pop-up ads are open at once, but there are none open on my computer. In my volume mixer, the sound source is listed as "Host Process for Windows Services."
 
I have been trying to fix this on my own, but I have been unsuccessful. So far I have tried scanning with Malwarebytes/Spybot Search and Destroy, used CCleaner, used TDSSKiller and Rkill, and did a Combofix scan. Even after using all of those tools, the sounds still play, and the computer crashes after a random amount of time. Sometimes the crash happens after only a few minutes, and sometimes it happens after a couple hours. I would also like to note that the Malwarebytes and Spybot scans came up clean. I have my combofix log but I think I'm not supposed to post it here.
 
I would appreciate any help/advice that you have for me.
 
Thanks.

A:Sounds playing in background with nothing open, computer crashes every 2 hours

Hi,
 
Since you have run Combofix, please follow these instructions:
 
Please follow the instructions in THIS GUIDE starting at Step 6. If you cannot complete a step, skip it and continue.
Once the proper logs are created, then make a NEW TOPIC and post it HERE. Please include a description of your computer issues, what you have done to resolve them, and a link to this topic.
If you can produce at least some of the logs, then please create the new topic and explain what happens when you try to create the log(s) that you couldn't get. If you cannot produce any of the logs, then still post the topic and explain that you followed the Prep. Guide, were unable to create the logs, and describe what happens when you try to create the logs.
It would be helpful if you post a note here once you have completed the steps in the guide and have started your topic in malware removal. Good luck and be patient.If HelpBot replies to your topic, PLEASE follow Step One so it will report your topic to the team members. xXToffeeXx~

2 more replies
Answer Match 52.08%

PC running Windows XP Home Edition SP2 emits random sounds, whether it's idle or being used: bugs (birds?) chirping, door slams, and George Bush saying, "America's opportunity." Very odd. Very annoying. Norton doesn't indicate a virus problem. Is it spyware? A quick search on this site doesn't find anyone with a similar problem. I would appreciate any suggestions. Thanks in advance.

Here's the HJT log:

Logfile of HijackThis v1.99.1
Scan saved at 3:55:04 PM, on 12/22/2005
Platform: Windows XP SP2 (WinNT 5.01.2600)
MSIE: Internet Explorer v6.00 SP2 (6.00.2900.2180)

Running processes:
C:\WINDOWS\System32\smss.exe
C:\WINDOWS\system32\winlogon.exe
C:\WINDOWS\system32\services.exe
C:\WINDOWS\system32\lsass.exe
C:\WINDOWS\system32\svchost.exe
C:\WINDOWS\System32\svchost.exe
C:\Program Files\Common Files\Symantec Shared\ccSetMgr.exe
C:\Program Files\Common Files\Symantec Shared\ccEvtMgr.exe
C:\WINDOWS\system32\spoolsv.exe
C:\WINDOWS\Explorer.EXE
C:\Program Files\Adaptec\Easy CD Creator 5\DirectCD\DirectCD.exe
C:\Program Files\QuickTime\qttask.exe
C:\Program Files\Symantec\Norton Ghost\Agent\GhostTray.exe
C:\Program Files\Real\RealPlayer\RealPlay.exe
C:\Program Files\Common Files\Symantec Shared\ccApp.exe
C:\Program Files\Viewpoint\Viewpoint Manager\ViewMgr.exe
C:\PROGRA~1\VISION~1\ONETOU~2.EXE
C:\WINDOWS\system32\spool\drivers\w32x86\3\hpztsb11.exe
C:\Program Files\Common Files\AOL\1101677506\ee\AOLHostManager.exe
C:\Program Files\HP\hpcoretech\h... Read more

A:Solved: Annoying bug chirping sounds, door slams, and Bush quotes

12 more replies